MS OS Patch This Patch That

[shiyan]

Nice.

Microsoft seems to realise that this is a problem, and seems to have changed their update policy.

Seems like they will bring out update "Security Rollups" on every first Tuesday or Wednesday of the months.

For example, here is the first update "Security Rollup", which includes 22 security updates all in one file:

http://support.microsoft.com/?kbid=826939

In an interview somewhere, Bill Gates said that security updates are now made available 24 hours after a hole is found. Seems pretty fast to me.

Here is the translated article:
http://babelfish.altavista.com/babe...de/newsticker/data/dab-17.10.03-001/&lp=de_en

and here's the original in German:
http://www.heise.de/newsticker/data/dab-17.10.03-001/

 

[zachj]

Yup . . . 'tis true. I think I even read it on CNN.com . . . I think this was discussed above, but I might be wrong . . .

In any event, if Microsoft intends to make this work (which is highly recomended for the sake of their image), then they need to release a sh**load of preemptive updates to keep these exploits from being used, they need to disable DCOM in a patch, and they need to FORCE the user to enter an admin password and dumb-down the "administrator" rights of normal "administrators" a little to limit system-wide access . . . If they don't do this, they're either going to continue to have to release patches every week, or they're going to leave holes unpatched for a month at a time . . .

And they need to enable automatic updates by default (allow the user to turn them off, though, so that they're not "taking over"somebody's system).

Z

 

[mtnbikerjerry]

I've never patched my winxp installs once. norton and zonealarm are all i use. never been hacked or got a virus, go figure lol

Your lucky.... but most people did not know these days they needed a firewall and some sort of protection. Who says you need to update when you have the proper security implemented on your system.

Your thinking like a corporation, all that time waisted on obtaining patches, and then pushing updates to many machines.

I have a machine that has no updates, but I am locked down with a good firewall, and antivirus. No problems, not even when sobig hit.

HA!

 

[shiyan]

I only use Hotmail, so I didn't notice SoBig at all haha.

not sure if that has anything to do with it at all actually...