RE: MBSA and MS's attempts at "security"
From: Ogle Ron (Rennes) (OgleR@thmulti.com)Date: 04/11/02
- Previous message: Laura A. Robinson: "Re: net use and LM / NTLM"
- Maybe in reply to: H C: "MBSA and MS's attempts at "security""
- Next in thread: Ogle Ron (Rennes): "RE: MBSA and MS's attempts at "security""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Ogle Ron (Rennes)" <OgleR@thmulti.com> To: "'Dennis Depp'" <deppdm@ornl.gov>, H C <keydet89@yahoo.com>, dadams@scientech.com, focus-ms@securityfocus.com Date: Thu, 11 Apr 2002 23:47:51 +0200
Yes there are other vendors providing similar capabilities, IBM, Sun, RedHat
(Linux) come to mind. Though the problem with patches is that they can
cause more problems than they fix. So automatic patching can just cause you
many problems (more than you had).
This doesn't even speak to the prospect of a mischievous person being able
to intervene on behalf of Microsoft and patch your system with their own
patches. (Boys and girls can you all say rootkit.)
These are some of the reasons why most companies have administrators, who
have brains and can think for themselves. Administrators (usually) have the
capability of testing and validating the patches. They can tell if it's
good or bad before they bugger up all of the machines.
Companies just must understand that this is part of that cost of doing
business. (Of course, most companies don't look at the total cost when they
decide upon using software X.) Some software costs more in admin costs than
others.
Microsoft is trying to reduce this cost burden because they know that
companies don't like the expense of having many admins. The funny part is
that companies don't recognize the true cost of owning Microsoft products.
Ron Ogle
Rennes, France
> -----Original Message-----
> From: Dennis Depp [mailto:deppdm@ornl.gov]
> Sent: Thursday, April 11, 2002 4:59 PM
> To: H C; dadams@scientech.com; focus-ms@securityfocus.com
> Subject: RE: MBSA and MS's attempts at "security"
>
>
> Question: Is any other OS vendor providing tools similar to
> hfnetchk or
> msba? Do other vendors provide free utilities that will
> automatically
> patch your systems?
>
> Dennis
- Previous message: Laura A. Robinson: "Re: net use and LM / NTLM"
- Maybe in reply to: H C: "MBSA and MS's attempts at "security""
- Next in thread: Ogle Ron (Rennes): "RE: MBSA and MS's attempts at "security""
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
