Re: Microsoft finally acknowledges the security drumbeats

From: John R Pierce (spam@is.invalid)
Date: 01/29/02 

From: John R Pierce <spam@is.invalid>
Date: Tue, 29 Jan 2002 12:05:19 -0800

On Tue, 29 Jan 2002 11:37:13 -0800, Philip J. Koenig
<See_email_@ddress_below.This_one_is.invalid> wrote:

>Another are the "security rollup" patches. This nonsense of
>having to wade through piles of poorly-organized junk in
>order to figure out what to patch, and do every one of them
>separately (rebooting the #*(%&#*$#$ machine after every one)
>is ridiculous.

I haven't seen that scenario since the debacle of NT4 post service pack
fixes when there was a *long* interval between SP4 and SP5/6, and each
post-sp4 fix was a seperate install.

>Like various other vendors, MS apparently
>figures if they make it hard to ascertain out how many patches
>they've released, dummies will be fooled into thinking the OS
>is more bug-free than it really is. If they are really "getting"
>it, they will dump this nonsense, and stop doing things like
>constantly screwing around with file versions and dates to
>keep people confused, etc.

actually, for win2000 at least, their new 'corporate update' site can
generate rollups of user selected patches... you decide, ok, I need patch
X, Y, and Z here, it generates a single executable that installs those 3
in one pass, this can in turn be mass deployed on a intranet using
standard corporate software distribution systems such as SMS, Zenworks,
etc.

Relevant Pages

  • Re: Microsoft finally acknowledges the security drumbeats
    ... >order to figure out what to patch, and do every one of them ... post-sp4 fix was a seperate install. ... generate rollups of user selected patches... ... standard corporate software distribution systems such as SMS, Zenworks, ...
    (comp.security.misc)
  • 9_Recommended error codes (specifically return code 5)
    ... * "return code 2" indicates patches are already installed. ... * "return code 25" means a patches requires another patch that is not yet installed. ... With or without using the save option, the patch installation process ... Installing 114008-01... ...
    (SunManagers)
  • Re: This is [Re:] How to improve the quality of the kernel[?].
    ... The -mm kernel already implements what your proposed PTS would do. ... If patch have no TS ID, ... Thus i can apply for example lguest patches and implement and test new ... How many open source projects use Bugzilla and how many use the Debian BTS? ...
    (Linux-Kernel)
  • Re: ATTACK of the WEEK-fentanyl patches
    ... FDA warns of deaths from fentanyl patch ... Some of the deaths came after doctors prescribed the patches to the ... The drug is only for chronic pain in people used to narcotics, ...
    (alt.support.chronic-pain)
  • Re: Conflicting info between the global Security Bulletin and some SPi Security Bulletin
    ... The MS02-050 is explicitly listed as included in SP4 AND in Rollup 1 ... I think the correct answer is that it depends on the era of the patch. ... installers do not always use such ... patches later than the end of 2002 are ...
    (microsoft.public.win2000.security)
Quantcast