18 Quotes by Marc Maiffret

One of our customers asked which patch they should deploy if there starts to be a lot of third-party patches. I told them, it's just like picking a dentist or a plumber -- you're going to go with someone who's got a good reputation.

Obviously these things (fixes) are experimental in nature but considering the options of being vulnerable or at least having a fighting chance--well, I think you get the point. Again, this is just another mitigation option until Microsoft releases their patch, which last was scheduled for April 11th, or 16 days from now.

It is definitely a stretch to call this a backdoor. Every security flaw ever found in Windows could have been a backdoor, and we would never have known. I think it's a bit 'tin foil hat' to try to say they are backdoors.

We have a good working relationship with Microsoft. We may disagree on a lot of things, especially how long it takes them to come up with a patch, but we agree on the most important thing, which is keeping customers protected.

We are definitely going to see dangerous exploits for it because it's not really technically challenging to write the exploit code.

The race is definitely going to be won by the exploit writers, because they're going to be able to publish an exploit in the next couple of days, ... It's such a glaring bug, I don't know how anybody else didn't discover it.

You have to wonder why it took more than 220 days to create that patch if they missed these flaws.

Companies like Microsoft are not equipped to deliver protection in a timely manner.

This is the type of vulnerability that's been exploited many times, and those two worms are the biggest examples because they had the biggest impact,