Mozilla 10-Day Patch Commitment Withdrawn: Impact on Security

The open source browser maker was forced to issue a statement Monday, retracting a pledge attributed to the company's director of ecosystem development, Mike Schaver, to fix any critical security bugs in the browser within "Ten ****ing Days." Fixing security bugs is not always a easy task, I feel that it was a good idea to retract there claim since it would be hard to backup. However, I hope that they release security bug fixes as fast as they would have with a 10-day deadline. Do you think that retracing their claim was a good idea?

Security researcher Robert Hansen said that Schaver had made the pledge at a late-night pyjama party, hosted at last week's Black Hat conference in Las Vegas.

When Hansen said he doubted that this was possible, Shaver apparently backed up his pledge in writing: putting it on a business card with an arrow linking to his mobile phone number. "I told him I would post his card -- and he didn't flinch. No, he wasn't drunk. He's serious," Hansen wrote in a Friday blog posting.

The link for this article located at InfoWorld is no longer available.