MS's error reporting pioneers new security risk

The new error reporting feature in Microsoft's new products—including Windows XP, Office XP, and newer versions of Internet Explorer—has prompted the US Department of Energy to release an advisory about the feature's security risks. The DOE advisory claims the information sent to Microsoft "includes a memory dump which may contain all or part of the document being viewed or edited." Obviously, that's bad.

I'm sure MS "just wants to help," but sending such information across the public Internet, only to be stored in a database that possibly could be compromised, seems loopy.

Tip: You can use the A/Z keys to walk threads.
View options

This discussion is now closed.