InformAction Forums

Yes, they did. It is a greater good situation.

It is nice to see some companies still have a soul; even if for nothing else than avoiding bad reputation for themselves. Although in all fairness, since they told you a long time ago they are done supporting it, any bitching on the part of the public is just ignorant anyway.

MsMpEng: Remotely Exploitable Type Confusion in Windows 8, 8.1, 10, Windows Server, SCEP, Microsoft Security Essentials, and more.

https://bugs.chromium.org/p/project-zer ... 252&desc=5

and the twit feed for the discoverer is pretty good info for other researchers too

Tavis Ormandy

https://twitter.com/taviso

Yes, even Tavis was impressed by the unprecedentedly quick patch and release by Microsoft before a single in the wild event ever took place. I am the last guy to be a M$ fanboy but when credit is deserved, it is due and sincerely given.

Looks like this might not be a one-time thing - https://arstechnica.com/security/2017/0 ... w-brokers/

(Thanks for posting that.)

Yes, Microsoft is generally pretty generous with their backward compatibility and doing damage control beyond their duty.

They tend to respect and honor public interest, but I think on a level it is a mistake.