AOH :: HP Unsorted F :: B06-2022.HTM

Foreseeing (cough) critical problems futile? (was: oracle, where are the patches???)



foreseeing (cough) critical problems futile? (was: Oracle, where are the patches???)
foreseeing (cough) critical problems futile? (was: Oracle, where are the patches???)



On Tue, May 02, 2006 at 04:10:27PM +0100, David Litchfield wrote:
> That's what good regular patches allow me to do. The benefits
> are absolutely clear.  There are two major problems that can
> cause these benefits to evaporate into thin air, however. 
> 1) Late Patches
> 2) Re-issued Patches

3) Artificially late patches -- those which could be made
available ahead of usual schedule to reduce vulnerability window.

I guess regular approach is OK for low-to-moderate but guarantees
enough additional headache for critical updates.  After all, it's
only vendor-found ones that can wait, and that's not exactly
"responsible" too since nobody can tell for sure the particular
problem isn't already known out there.

-- 
---- WBR, Michael Shigorin  
------ Linux.Kiev http://www.linux.kiev.ua/ 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.