Latest in Disclosure

Image credit:

Google is giving companies a break on security disclosures

Jon Fingas, @jonfingas
February 15, 2015
Share
Tweet
Share

Sponsored Links

Google's Project Zero is supposed to goad companies into patching software security flaws before they pose a threat, but that's not exactly how the effort has panned out. As Apple and Microsoft will tell you, the strict 90-day disclosure deadline sometimes leaves developers scrambling to finish patches after the details of an exploit go public. Thankfully, Google appears to be listening to those gripes -- the Project Zero team has tweaked its policies to give programmers a better chance at mending holes. Companies now get a 14-day "grace period" to release fixes if they let Google know that the code won't be ready within the usual 90-day window. Also, the folks in Mountain View won't ruin tech workers' days off by revealing vulnerabilities on holidays and weekends.

Project Zero's policy still isn't as forgiving as others, such as ZDI's 120-day schedule. Even so, it could go a long way toward bridging the gap between Google's ideals and the practical challenges of delivering updates on time. Unless security developers fall significantly behind schedule, there's less chance that virus writers will get a head start and attack your devices before you can realistically protect yourself.

[Image credit: Shutterstock]

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

The 2020 Engadget Holiday Gift Guide

The 2020 Engadget Holiday Gift Guide

View
All Warner Bros. films in 2021 will debut on HBO Max

All Warner Bros. films in 2021 will debut on HBO Max

View
macOS Big Sur review: A mix of new and familiar

macOS Big Sur review: A mix of new and familiar

View
The gold, 8th-generation iPad returns to $299 at Amazon

The gold, 8th-generation iPad returns to $299 at Amazon

View
DoorDash lets restaurants add their own delivery drivers to its service

DoorDash lets restaurants add their own delivery drivers to its service

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr