![\"microsoftxwindows\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2016\/11\/MicrosoftXWindows.jpg\")
Tech giants Google and Microsoft are at odds, thanks to a recent announcement made by Google about a vulnerability in Windows\u2019 Operating System.<\/p>\nTech giants Google and Microsoft are at odds, thanks to a recent announcement made by Google about a vulnerability in Windows\u2019 Operating System.<\/p>\n
Google\u2019s longstanding policy has been to inform the company that owns the software when a security flaw is found. Google\u2019s thresholds are seven days for an announcement, and ten days for a patch. If neither of those things happen, Google makes the announcement.
\nSeven days after Google informed Microsoft of this latest security flaw, the software giant had not released any information to its massive user base. So Google, in keeping with its policy, made the announcement, causing Microsoft to cry foul.<\/p>\n
Microsoft\u2019s position is that seven days is an extremely aggressive timeframe, and for software as complex as Microsoft\u2019s Operating System, it\u2019s seldom enough time to even research and verify the problem. Ten days is certainly insufficient time to prepare and properly test a patch.<\/p>\n
Google\u2019s view on the matter is significantly different. From their point of view, informing the public does two things. First, it spurs the company that owns the software in question to action. Once the flaw is widely known, the clock starts ticking, and it\u2019s just a matter of time before hackers begin to ruthlessly exploit it.<\/p>\n
This has the benefit of making the entire ecosystem stronger.<\/p>\n
Google also contends that it\u2019s good policy because it lets the users of the software in question know the risks they face. If the vendor isn\u2019t forthcoming, someone has to be.
\nThere\u2019s something to be said for both sides of the argument. On one hand, this has been Google\u2019s standard practice for years now, and it has had the desired effect. Companies are very quick to apply resources to fixing critical security flaws, limiting the risk in the long term.<\/p>\n
On the other, announcing security flaws to the wider public carries certain risks. In their haste to fix the immediate problem, companies may not have the time to properly test their new patch, which could lead to the introduction of additional flaws. It also alerts the hackers of the world to new opportunities. Granted, the window tends to be small, but they can inflict significant damage, even in a limited window.<\/p>\n
In this instance, since the security flaw was already being exploited by hackers around the world, Google seems to be on the right side of the issue, but things are not always so clear cut.<\/p>\n","protected":false},"excerpt":{"rendered":"
Tech giants Google and Microsoft are at odds, thanks to a recent announcement made by Google about a vulnerability in Windows\u2019 Operating System. Google\u2019s longstanding policy has been to inform the company that owns the software when a security flaw is found. Google\u2019s thresholds are seven days for an announcement, and ten days for a […]<\/p>\n","protected":false},"author":5,"featured_media":24983,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[30],"yoast_head":"\n