Linked by Thom Holwerda on Wed 9th May 2007 10:15 UTC, submitted by anonymous
Microsoft Microsoft has released patches for 19 vulnerabilities, 14 of which are critical, hitting at holes in Excel, Word, Office, Exchange, Internet Explorer, cryptographic technology and the whopper of them all, the zero-day vulnerability in the DNS Server's use of RPC. The DNS remote code execution vulnerability affects server-grade operating systems, including Windows 2000 and Windows Server 2003, and only those that have the DNS service enabled, such as Domain Controller, DNS Server or Microsoft Small Business Server configurations.
Thread beginning with comment 238952
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[7]: It´s really funny
by kaiwai on Wed 9th May 2007 21:25 UTC in reply to "RE[6]: It´s really funny"
kaiwai
Member since:
2005-07-06

First, I'm sure you don't mean to include Apple when you say "non-Microsoft vendors" because their track record on average discovery to patch time compares with Microsoft's pretty closely.


Actually, in some cases I'd say they're worse - take a look at the Month of Apple Bugs, if it weren't for that - how long would of it had been for those issues to be fixed?

Second, patch availability doesn't equate to patch installation on an end-user's box. Shortening the cycle time merely increases the number of patches; it doesn't mean that the software you're using is "more secure".


Hence the reason you'll never hear me bash Microsoft if they release a patch and there are idiots who fail to maintain their computer by checking for updates and installing them.

If Microsoft releases the patch in a timely manner, they can then say, "hey, we've done our end of the bargin, the ball is now in the users court" but the simple fact is, there is such a delay that in many cases, end users become infected before the patch is released.

Edited 2007-05-09 21:32

Reply Parent Bookmark Score: 3