Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750

From: Me2 (nospam_at_nospam.com)
Date: 10/05/03 

Date: Sun, 5 Oct 2003 09:59:32 -0700

Jim, George,

I don't get it! Are you advocating that if a new Trojan/virus/worm is
starting to infect thousands of machines in a serious way that Microsoft
should NOT notify its customers just because they don't have a fix yet!!! I
don't get it - where is this coming from?

> "Jim Eshelman" <newsgroups@aumha.org> wrote in message
> | I repeat: I very much would NOT want them to make known any
vulnerabilities
> | prior to having a fix for them. All that does is exacerbate bad
conditions.

"George (Bindar Dundat)" <JustMe@nothome.net> wrote in message
news:e9WUVBziDHA.1688@TK2MSFTNGP12.phx.gbl...
> I prefer if they don't make any grandstand announcements even when they do
have
> the fix. Even that can lead to trouble as evidenced by the RPC
vulnerability.
> There was a big initial fuss made about it and that only served to alert
the
> script kiddies so they could cause problems before everyone was patched.

So the next worm is out there deleting hard drives, and you guys would stand
by M$ and let it happen - sticking to your "well it might get worse
statements"? I would like to think that this is not the case in that you
have a point where a Trojan/virus/worm is bad enough where a proclamation
from on high from M$ is warranted...

Maybe Trojan.QHosts was not that wide spread so is was prudent to keep it
quiet (event though the news media had tons of articles running), I don't
know.

I would like some kind of notification when the next bug is STARTING to go
around !!! I will look to third parties since it looks like M$ will not be
doing this - and the party line is "kept it quiet..."

Me out

>
> --
> George (Bindar Dundat ©) MS-MVP
> This information is provided "AS IS"
> It may even be wrong!
> For Windows Troubleshooting Tips see
> 9x/ME
> http://aumha.org/win4/a/tshoot.htm
> 2000/XP
> http://aumha.org/win5/a/tshoot.htm
> "Jim Eshelman" <newsgroups@aumha.org> wrote in message
> news:u3So8RyiDHA.2520@TK2MSFTNGP09.phx.gbl...
> | Me2 wrote:
> | > It looks like your advice of "follow[ed] normal protocol of
> | > installing ALL critical updates upon release" is just pis$ in the
> | > wind. The MEDIA - not Microsoft alerted M$ customers to
> | > Trojan.Qhosts.
> | >
> | > I read that there are close to 30 KNOWN additional IE
> | > vulnerabilities. Are we going to hear about these from M$ after the
> | > next worm turns? Why can't M$ give us some guidance on IE use in
> | > light of the reported vulnerabilities???
> |
> | I repeat: I very much would NOT want them to make known any
vulnerabilities
> | prior to having a fix for them. All that does is exacerbate bad
conditions.
> |
> | --
> | Jim Eshelman, MS-MVP Windows
> | http://aumha.org/
> | http://WinSupportCenter.com/
> |
> |
> | Did you find this newsgroup on the web? A newsreader like Outlook
Express
> | will make your online life a lot easier. Get better help! See:
> | http://aumha.org/win4/supp1b.htm and
> | http://support.microsoft.com/support/news/howto/default.asp
> |
> |
>

Relevant Pages