Let's be clear: Microsoft's pledge is not a blanket covenant not to sue [UPDATE]
Ina Fried reported that Microsoft was covenanting "not to sue over open source." This, unfortunately, is only half-true. Microsoft did agree not to sue open-source developers, but it had already promised that before. [NOTE: My memory was a little fuzzy on this. See below.] It also said it would provide access to its IP to commercial open-source companies at fair rates, which is also not news.
In other words, there is no some news in Microsoft's announcement as it pertains to patents and open source. None. Or very little.
UPDATED: What I failed to mention was that Microsoft's original pledge was more constrained to developers in the OpenSUSE.org community and to "non-compensated developers." In other words, developers too poor to worry about. :-)
So, the fact that Microsoft is now opening up to any open-source development and non-commercial distribution is important, though not significantly more than it originally promised. It's still designed to limit non-commercial distribution, which is effectively what the original proposal called for. I understand Microsoft's stance on this. I just wish that it would change it.
Instead, the really big news is Microsoft's commitment to open APIs and open protocols. That's the takeaway. This announcement really has nothing little to do with open-source companies or developers, except inasmuch as they want to better interoperate with Microsoft technology (which many of us do because our customers require it).
It's great news, and it's big news. My company has been seeking this API and protocol information for months (years, really). But Microsoft's pledge doesn't obviate the need to negotiate patent royalties, if required, with the company. I do know, anecdotally, that Microsoft is offering very low royalties for these patents, and it's also promising to more clearly delineate the boundaries of these patents.
But this is not a free lunch for open source. Sorry.
Matt Asay brings a decade of in-the-trenches open-source business and legal experience to The Open Road, with an emphasis on emerging open-source business strategies and opportunities. Matt is vice president of business development at Alfresco, a company that develops open-source software for content management. He is a member of the CNET Blog Network and is not an employee of CNET. Disclosure. You can follow Matt on Twitter @mjasay. 
This would give much greater visibility of reported issues, and progress in addressing them.
It is crucial to understanding the difference between the documentation and the actual implementation.
See http://weblog.timaltman.com/node/834 - now a couple of years old, for one guy's attempt to report a bug. Not a lot has changed since, AFAIK.
There used to be such a thing for IE7 - see http://blogs.msdn.com/ie/archive/2006/03/24/560095.aspx
but it seems to have quietly disappeared. http://channel9.msdn.com/wiki/default.aspx/Channel9.InternetExplorerFeedback says "The Internet Explorer Feedback page is temporary closed. Report all security bugs directly to secure@microsoft.com."
cheers
Jason