[ISN] Gates closed to the teenager who shut Windows opening

InfoSec News isn at c4i.org
Mon Apr 19 05:28:53 EDT 2004


http://news.scotsman.com/scotland.cfm?id=422222004

STUART PATTERSON
15 Apr 2004

A TEENAGER who spotted a major security flaw in Microsoft's Windows 
operating system, told the company and then worked "round the clock" 
to correct it, says he never got a penny for his efforts. 

Matt Thompson, 19, was just out of college when he discovered the 
fault with the software. 

After he pointed out the problem to Microsoft, which is owned by the 
billionaire Bill Gates, he spent all his free time working with the 
firm to correct the error. 

Mr Thompson, from Aberdeen, said yesterday: "I haven't got any money 
from them, even though I'm sure they could easily afford it. Microsoft 
just expected me to work round the clock for the sake of it. 

"I did get an acknowledgement of thanks on their website, and I think 
that's supposed to act as my reward." 

Mr Thompson, a computer enthusiast from an early age, started working 
at the consultancy firm Aberdeen IT last summer. The company quickly 
put him to work creating websites and databases for its corporate 
clients. 

Like millions of other PC users around the world, his computer is 
fitted with Microsoft's Windows operating system. But as he used the 
software while creating a database for a client, he stumbled across an 
error that threatened the security of every computer that runs on the 
Windows system. 

The glitch leaves computers vulnerable to hackers, who can send 
viruses to the machines via the internet simply by inputting a number 
of commands into their own PC. 

He said: "I carried out a few tests. Then I did a few more. I spent 
hours checking it." 

Mai Luc, an official spokeswoman for Microsoft, said: "We do not 
operate a system where we give out financial rewards. 

"We would, however, like to thank Matt Thompson of Aberdeen IT for 
working with us to help protect customers by reporting the Jet 
Vulnerability."





More information about the ISN mailing list