Google Researcher Publishes Windows 10 Zero-Day Security Vulnerability
<p><pre><code>  "Personally I think it's a bit harsh,"
  Wright says, "every fix is different
  and they should allow for some
  flexibility in their deadline."
</code></pre>
As far as I can tell, (1) this is a denial-of-service bug, not a privilege escalation or remote root exploit, i.e. a low-severity bug; (2) it is unlikely any code depends on the infinite loop triggering, meaning this fix doesn't call for great architectural upheval; and (3) the deadline was already extended to 91 days, rather than the usual 90.<p>If you'd give out deadline extensions for this bug you'd give them out for almost any bug, so you may as well not have deadlines at all.