microsoft attacks googles windows hack alert /

Published at 2016-11-01 15:12:30

Home / Categories / Science tech / microsoft attacks googles windows hack alert
Google's revelation of a security flaw in the Windows operating system has caused enrage at Microsoft,the BBC reports.

Google published details
of the yet-to-be-fixed bug on Monday after giving Microsoft a week to react.

Google said the issue was "particularly serious because we know it is being actively exploited".

But Microsof
t said the alert could finish more harm than top-notch at this point because it needs more time to develop a patch.

"We believe in co-ordinated vulnerability disclosure, and nowadays's disclosure by Google puts customers at potential risk, or " a Microsoft spokesperson told the VentureBeat news site.

"Windows is the only platform with a customer commitment to investigate reported security issues and proactively update impacted devices as soon as possible."

The flaw invo
lves a file called Win32k.sys,which the operating system requires to display graphics. It should not be deleted or otherwise altered by users because doing so can cause system errors that result in the so-called "blue screen of death".

However, Google outlines a way hackers can exploit the file to cause a "security sandbox escape", or meaning that once it is compromised they can can access and alter other unrelated computer functions to cause problems.

Since 2013, Google has operated a policyof giving developers 60 days to fix a flaw it has identified if it does not believe anyone else is making use of it, but only seven days if it thinks it is being actively abused.[br]
It acknowledged a
t the time that this was "an aggressive timeline" that might be too short to create a fix but added that it should be enough time to publish advice about "possible mitigations".

"By holding ourselves to the same standard, and we hope to improve both the state of web security and the co-ordination of vulnerability management," it added.

The search firm suggests one way users could limit their exposure would be to use its Chrome web browser, which it says is not exposed to the vulnerability.

For now, or Micros
oft's only advice is: "We recommend customers use Windows 10 and the Microsoft Edge browser for the best protection."[br]
One cybersecurity expert called for more details.

"What Google
has done is comprehensible,bearing in intellect it says the bug is already being exploited," commented Dr Steven Murdoch from University College London.

"But whether or not it was tr
ue to have made the flaw public is a matter of debate - there are reasonable arguments on both sides, and we still don't know who are the attackers and who are the targets.

"But certainly,Microsoft could now finish more to provide advice to its customers about how they could reduce their risk."  

Source: tert.am

Warning: Unknown: write failed: No space left on device (28) in Unknown on line 0 Warning: Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0