Office zero-day bugs spoil Patch Tuesday

TalkBack 13 of 23:

Next »

« Previous

• Thread View
• Flat View

Exploits, not vulnerabilities

Please elucidate the number of in the wild, successful exploits affecting Sun. You are right, especially with patches and updates, the *nix world delivers lots, but they are not exploited (they are vulnerabilities, that even when breached run up against the underlying OS built in security). I hope that Vista's underlying OS securities help mitigate all the application flaws. As for the updates I installed today, 7 of them, they were all bug fixes, no security vulnerabilities.

I am being serious here, what now are the rules for working, as a business, in a non Vista MS world. Which of these are wrong.

1) Never install or run an executable unless you purchased the shrink wrapped version from a store.
2) Never open any email attachment of any kind no matter what the source, even colleagues. If you must open something, perform an MD5 to make sure the document is actually the <ocument.
3) Never download anything on the web. Better yet, never surf the web or limit yourself to a whitelist of sites.

The sheer volume of security vulnerabilities in a non Vista world are staggering. I submit, and as the list of zero day exploits proves, the most up to date XP, with all patches, in non admin mode, with 3 or 4 anti-malware packages (none eliminate or find all, Windows defender being one of the poorest), anti-virus completely up to date and finally firewalled, can still not be deemed secure.

Our IT group, with it's complete control over patches, firewall, anti-virus (corporate version) and anti-malware, STILL finds and eradicates malware and viruses continually on corporate machines. If Vista were ready, I would recommend any and all Windows users uprade, but it isn't.

I know I will get flamed from all of those who guarantee they are malware free (and surf online with I.E, no anti-anything), but the bleeding has to stop for MS. Can they really withstand the bombardment of bad press, everywhere, constantly, whether you agree with anything I have written above or not?

TripleII

Posted by: TripleII   Posted on: 04/11/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now