Microsoft on Responsible Vulnerability Disclosure
Mark Miller, director of the Microsoft Security Response Center, shares his opinions about the wisdom of sharing vulnerabilities with customers. "Responsible disclosure, reporting a vulnerability directly to the vendor and allowing sufficient time to produce an update, benefits the users and everyone else in the security ecosystem by providing the most comprehensive and highest-quality security update possible."
