Microsoft Criticises Google On Windows Security Flaw

13/01/2015 8:52 AM IST | Updated 15/07/2016 8:24 AM IST
Bloomberg via Getty Images
The Microsoft Corp. Surface Pro 3 tablet computer is displayed during an event in New York, U.S., on Tuesday, May 20, 2014. Microsoft Corp. introduced a larger-screen Surface tablet that is thinner and faster than the previous Surface Pro model, its latest attempt to gain share in the market dominated by Google Inc. and Apple Inc. Photographer: Jin Lee/Bloomberg via Getty Images

Microsoft Corp has complained publicly about tech rival Google Inc revealing a security flaw in its Windows 8.1 system just days before Microsoft was scheduled to roll out a fix for the problem, potentially exposing users to hacking.

The spat highlights an ever-present tension in the software security sector between those who believe flaws should be revealed sooner rather than later to put pressure on companies to tackle the issues, and developers who sometimes need more time to come up with a solution.

In this case, Google is in the former camp, through its "Project Zero" team, which scans all types of software for bugs and reports problems privately to the developers who created them. Google gives developers 90 days to fix a problem before making the issue public.

That happened on Sunday, when Google posted a security bulletin concerning weaknesses in the user profile creation process in Windows 8.1, which could allow hackers to take control of a computer. Google had initially told Microsoft about the problem on Oct. 13.

Microsoft plans to publish a fix this week as part of its regular security update, known in the industry as "Patch Tuesday."

"We asked Google to work with us to protect customers by withholding details until Tuesday, Jan. 13, when we will be releasing a fix," Microsoft executive Chris Betz wrote in a blog on the company's site on Sunday.

"Although following through keeps to Google's announced timeline for disclosure, the decision feels less like principles and more like a 'gotcha,' with customers the ones who may suffer as a result."

Google did not immediately respond to a request for comment.

More On This Topic