Does the security of Microsoft products REALLY rely on the charity of hackers to privately report the defects they find in Microsoft software?
Good Lord, it's worse than I thought. I'm glad I don't use the affected product.
The whole, some hacker did not tell MS first argument might hold weight if this hole was not revealed nearly 6 months ago! Six months to fix a pretty serious bug, should be long enough..