“Microsoft alerted us this time about seven vulnerabilities of which five were rated critical and two important. There are vulnerabilities in the Server service, the DHCP Client service, Excel and Office that could allow remote code execution.”
“Microsoft alerted us this time about seven vulnerabilities of which five were rated critical and two important. There are vulnerabilities in the Server service, the DHCP Client service, Excel and Office that could allow remote code execution.”
The latest installment in the endless patch cycle. No matter what system you use, it seems like there is constant patching involved. Of course, I’d *rather* have them giving out the patches…it means they are actually fixing bugs and closing security holes; the alternative wouldn’t be pretty.
No matter what system you use, it seems like there is constant patching involved.
Tell that to the millions of Win98 and WinME users out there
Care to point me to a Linux vendor that supports their OS for as long as Win98 and ME have been around?
Slackware? It has had security patches since it’s birth, which was before Win98.
“omg that doesn’t count!!! I meant Red Hat and professional support!!11!!1”
Slackware? It has had security patches since it’s birth, which was before Win98.
“omg that doesn’t count!!! I meant Red Hat and professional support!!11!!1”
Didn’t Redhat backport a lot of patches to the 2.4 kernel even?
That’s the beauty of it, that you don’t need to rely on the vendor to get your system secured.
All of them !
GNU/Linux is one OS , with many vendor and supporter.
Windows 98 stopped being supported in 2000 , Microsoft patched it until july 2006.
Windows ME never was really supported , I pitty the fool who got to buy it , it got patched until july 2006.
If you got the money and whant older version upgraded and patched , there are vendors who can do the job for you , but you are better served by the latest offerings.
OK…I’ll amend it: no matter what (supported) system you use, it seems like there is constant patching involved.
… there’ll be 7 more vulnerabilities to pop up.
I really can’t see the point on these so-called news. MS has been patching vulnerabilities for years, and it looks as it will continue to do so for some more.
Now, it’s time for me to update my Linux system…
Seriously guys, stop bashing Microsoft. They are *really* trying to make Vista a secure product. If they weren’t, they wouldn’t be demoing it’s security features at real hacker conventions. Let them release it and then flood them with angry comments once holes are found in their new security features. A good example would be alsr:
http://www.tuxedo-es.org/blog/2006/07/06/vista-probe-02-release/
Microsoft is trying to catch up (security wise) where Linux was about 3-5 years ago. Let them try and if they do a miserable job, you will know as you see reports of worms ravaging the net.
Note I am writing this from an Ubuntu desktop at work as a Unix/Linux systems admin…
I wasn’t bashing them at all. Like I said, I’d rather see them patching than not. And yes, they’ll still have holes in Vista…every OS has holes (though OpenBSD has done a pretty darn good job making their system secure).
Yeah OpenBSD is secure, but only the ‘default install’ is, what can you do with the default install?
Run a Web/Mailserver?
If I install a Windows box and strip al crap with nlite and only install sendmail and apache on it it is as much secure as OpenBSD is.
If I install a Windows box and strip al crap with nlite and only install sendmail and apache on it it is as much secure as OpenBSD is.
ALSR, PIE, W^X, SSP, TCP Window Randomization, swap encryption, etc… Those are all proactive security features that go into OpenBSD. They come at the price of making it run more slowly and more difficult to use but increase security.
Microsoft uses the reactive approach to security and would not even compare to OpenBSD in your scenario. If you really don’t understand something, please don’t speak like you do.
Where Linux was?
Don’t make you show you a vulnerability listing of the Linux kernel dating back 3-5 years … And the kernel is just one part of a full-out GNU/Linux system.
vulnerability listing is not the same as in use vulnerabilities , more people looking at the code means more vulnerability are found and test done on it.
Actually, more people looking at the code means code needs to be written to a higher standard before it is released. It also means that bugs are likely to be fixed much more quickly than with a proprietary solution.
http://www.prnewswire.com/cgi-bin/stories.pl?ACCT=104&STORY=/www/st…
And as I read that, memories of the childhood story came back…
Yeah I know, horrible.
News at 11…
*yawn*
I’m surprised by the apathy to these patches. I’m amazed that anyone would say look at Vista and say “don’t be mean” they are really trying with security.
Having looked at the profit Microsoft make each year, and their control of the OS market; Number of employees etc, Security is generally not good enough, and pointing to the next OS and saying thats the silver bullet is nonsence. Its not out till at least 2007.
The reality is that any comparison can be drawn to Linux or even OS X should be an embarassment to Microsoft.
The reality is the article in question contains nothing other than Microsoft fixed some serious vunerabilities, and they damn well should.
Its not a good indication of how effective they are at finding, fixing, or even quality of code, but then again judging by the comments here who would care.
any TEXT description about what those vulnerabilities realy is?
ahem,
These updates include an undocumented, secret method of snooping your hard disk to obtain list of MS and/or other installed software so that MS can shove its asset management software down your throat, force an enterprise agreement upon you, rape and pillage your company’s bankroll, offer poorly coded products with endless patching and security updates and last but not least, fund the Bill and Melinda Gates foundation in order to further suppress Linux in developing countries.
Did I miss anything?
< and yes, i’m be facetious… >
Edited 2006-07-13 15:22
Oh, I am so glad that I actually test these patches before pushing them out. My XP desktop is now utterly useless. Start Menu and taskbar no longer work, can’t connect to network resources, etc. etc. None of the articles on MS or Google corrected the problem. System Restore is useless too. Good luck fellas.