Information
Equipo Nizkor
        Bookshop | Donate
Derechos | Equipo Nizkor       

09Jul13

Microsoft reports hackings linked to report by Google researcher

Microsoft Corp said hackers have attacked some computers by exploiting a bug in Windows first disclosed two months ago by a Google Inc researcher, who came under fire at the time for publicizing the flaw without going to the software company first.

Microsoft provided few details about the attacks. In an advisory on Tuesday, it said hackers had launched "targeted attacks," a term generally used by security experts to refer to cyber attacks on corporate or government targets, with espionage and sabotage as the motive.

Google security engineer Tavis Ormandy's disclosure in May was controversial because he posted technical information on the Web that described the bug in the Windows operating system, which some experts said could help malicious hackers launch attacks, before Microsoft had released software to fix it.

Officials with Microsoft declined to comment when asked if they believed Ormandy's disclosure of the vulnerability had led to the attacks.

Ormandy also drew attention because he lashed out in a blog posting at long-time Google rival Microsoft, saying that its security division was difficult to work with. He advised other researchers to use pseudonyms and anonymous email when communicating with the software maker.

"It leaves a slightly bad taste in the mouth to see somebody who is a Google security researcher have a pop at Microsoft," said Graham Cluley, an independent security researcher.

Ormandy could not be reached. A Google spokesman declined comment, saying that Ormandy's Windows project was personal and not related to his work for the company.

[Source: By Jim Finkle, Reuters, Boston, 09Jul13]
Tienda de Libros Radio Nizkor On-Line Donations

Privacy and counterintelligence
small logoThis document has been published on 10Jul13 by the Equipo Nizkor and Derechos Human Rights. In accordance with Title 17 U.S.C. Section 107, this material is distributed without profit to those who have expressed a prior interest in receiving the included information for research and educational purposes.