Douglas Schweitzer's picture
Douglas Schweitzer

The Security Sector

Find this hidden (but published) code

I suppose Aviv Raff was right when he decided to go public with his finding of a Microsoft software flaw. According to Robert McMillan's article 0day treasure hunt, Raff discovered a 0day vulnerability for which he embedded a proof-of-concept code in his blog.

If you're running IE 7 and IE 8, an attacker could feasibly run unauthorized software on your computer. Raff notified Microsoft and when they didn't immediately patch the software, he decided to go public. Granted, Raff didn't give them much time to respond, but I guess this'll prompt them to perhaps drum up a patch more quickly.

Maybe his methods aren't conventional, but you gotta admit, he's thinking outside the box.

What is Tech Briefcase?
TechBriefcase is a new, free service where IT Professionals can Search, Store and Share IT white papers and content like this. Learn more
Bookmark content
Speed up your research efforts with content across the web.
Search and Store
Find the white papers you need. Create folders for any topic.
View Anywhere
Open your briefcase on your iPhone, tablet or desktop. Share with colleagues.
Don't have an account yet?