Published at LXer:

As to the specifics of why Microsoft wants access to this closed list, Levin explained the issue by suggesting that while Microsoft has a "decades-long history of addressing security issues via MSRC," and is "able to quickly ([he]lt[/he]1-2 hours) create a build to address disclosed security issues," it requires extensive testing and validation before those patched builds can be made public. "Being members of this mailing list would provide us the additional time we need for extensive testing," Levin concluded.

Read More...