Patching up problems

TalkBack 15 of 26:

Next »

« Previous

• Thread View
• Flat View

You "30 day grace" apologists should ...

... reread a couple items here:

"In some cases, administrators using patch management have to move so fast to install a fix that they aren't able to test it beforehand."

and:

"People often feel squeezed. Sometimes there are cases where they can't patch quickly enough. There may be an exploit out there before you can get your systems patched."

and this one is good, too:

"That's despite the fact that patches have frequently caused additional problems within corporate networks by turning off needed functions, or because the fixes themselves have had flaws."

This is what really frosts me with saying we should let rich software developers have 30 days to fix their vulnerable products, while the poor SysAdmins dance the dance of trepidation waiting for the Black Hats to hose their systems.

But the line I REALLY like in this article is THIS one:

"Rice said the best solution for resolving security vulnerabilities lies with software makers, which should fix code before it's put on sale."

I don't if can be accomplished 100%, but it CERTAINLY could be done a lot better than it is being done NOW. Like I said elsewhere on ZDNet: Let's give 'em a target of 30 HOURS, and let THEM do the Apprehension Boogie for a little bit and maybe they'll get a little bit more serious about securing things and fixing bugs.

Posted by: Judas I.   Posted on: 01/28/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Finally, an easier way for Small and Mid-Sized Companies to Run Their Business Applications: IBM Smart Business IBM From the PC to the Internet to every piece of hardware and software in ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now