At the ToorCon security conference held in Seattle this past week, Microsoft announced a major shift in it’s online security model. They have publicly pledged not to sue hackers into oblivion should they find security flaws in their online services, assuming you hack and tell that is. Generally, researchers are free to hack away on software running on their own PCs but “research” done with online services was not unlike continually poking a sleeping dog – while one could argue no harm was intended, they often got bit nonetheless.
In example of throwing your weight around for good, Microsoft security strategist Katie Moussouris further announced that such a proposal is making its way through the International Organization for Standardization. If passed, it would protect ethical hackers who responsibly disclose holes in other companies’ websites. Well played Microsoft!
The philosophy here is if someone is being nice enough to point out your fly is down, they’re really doing you a favor and you should thank them rather than calling the cops and saying you’re a pervert.
A new Microsoft? What’s next, Vista refund coupons?
Discussion
No comments for “Microsoft: Don’t hate the finder, hate the vulnerability”
Post a comment