Re: [Full-Disclosure] Re: Microsoft Security, baby steps ?

From: Blue Boar (BlueBoar_at_thievco.com)
Date: 03/17/04

  • Next message: Jimmy Mitchener: "Re: [Full-Disclosure] Symantec engineers are half-wit or...?" 
    To: nick@virus-l.demon.co.uk
Date: Tue, 16 Mar 2004 21:34:42 -0800

    Nick FitzGerald wrote:
    > Perhaps, but I doubt it... I can't see the bandwidth costs (at the
    > relatively high discount rate MS must get for all its bandwidth) of the
    > necessary downloads for all those unpatched users who order this CD
    > outweighing the P&P for fulfilling the CD orders.
    >
    > I think MS has finally realized that while dial-up users are not at all
    > likely to get the large security updates (IE version upgrades, OS
    > service packs), they can be significant combined part in the overall
    > problem of unpatched machines. This is the easy way for such users to
    > "catch up" (it's just a pity that there is such a huge lag between MS
    > freezing the disk's contents and pressing and shipping it -- for moost
    > Xp users it will arrive about a wek before they face downloading SP2
    > and that is likely to be around 150MB I hear...).

    It's a good start. I've got the disk on order, it will be a nice
    jump-start for all the home users' machines with modems that I maintain
    for friends and family, new installs, etc...

    Now, I just need an ISO image I can download once a month or so. Yeah,
    right after the 2nd tuesday of the month would do it.

    I imagine the security community would have created this long ago if MS
    would let other people distribute their patches.

                                                    BB

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Jimmy Mitchener: "Re: [Full-Disclosure] Symantec engineers are half-wit or...?"

    Relevant Pages

    • Re: How to farm out Windows Update
      ... > that runs on your server and downloads all of the security updates ... > automatically pull the updates from your SUS server. ...
      (microsoft.public.win2000.setup_deployment)
    • Re: Security update failed.
      ... Should I get rid of the old failed program, ... "Frank Martin" wrote: ... security updates, but this time I get the ...
      (microsoft.public.windowsxp.general)
    • Re: How to farm out Windows Update
      ... Software Update Services will do just what you want. ... that runs on your server and downloads all of the security updates ... automatically pull the updates from your SUS server. ...
      (microsoft.public.win2000.setup_deployment)
    • RE: 3 out of 5 updates wont install
      ... Downloads just fine, but then the installation of those 3 security updates for XP fails. ...
      (microsoft.public.windowsupdate)