Re: Why not patch all windows and not just legal copies

No they wont :-)

SP2 requires validation as does many other essential software like the
intelligent updater components, MBSA 2.0 and defender.

Hackers blow thru firewalls like smoke thru a screen door. SPI firewalls are
not enough and a simple review of anti spyware products (Spybot S&D,
AdAware, All Anti-Virus, Microsoft Defender, Spyware Doctor etc,) clearly
indicates that NONE of them get ALL of the threats.

The sane thing is to remove the requirements for validation and encourage
all Windows users regardless of illicit ownership to patch. This will reduce
the amplification potential for malware since there will always be SOME
users that dont patch but the total number will be vastly smaller.
Alternatively Microsoft can simply force all non-domain computers on
high-speed connections to passively patch.



"Tom Willett" <tompepper@xxxxxxxxxxxx> wrote in message
news:eR0bFZmkGHA.3440@xxxxxxxxxxxxxxxxxxxxxxx
When using Automatic Updates, they will be installed to "illegal"
versions.


"Michael Davis (Comcast.Net)" <netguru@xxxxxxxxxxx> wrote in message
news:uz8Q5vlkGHA.4224@xxxxxxxxxxxxxxxxxxxxxxx
It seems to me that its a bad idea to deny owners of illegal copies of
windows the ability to patch their computers. Windows is running on
hundereds of millions of computers and hundreds of millions of computers
are not being patched. Here are the issues which lead to the perfect
storm we are in right now.

1. Computer programming languages like C that do not check for buffer
overflow (require that the programmer code for buffer overflow checking
within the application itself)

2. monolithic adoption of a singular operating system for servers and
client computing.

3. stolen code for NT 4.0, Windows 2000 and Windows XP.

4. majority of Microsoft code run in pacific rim and former USSR is not
legit

Microsoft Policy requiring validation to patch operating systems.

5. windows available from WAREZ and other download sites, hacked,
infected etc.

6. rapid adoption of new code practices without consideration of the
security consequences

7. botnets composed of compromised systems

8. adware, spyware, malware, virus (to me, if I didnt install it, its a
virus)

9. The Internet and nature of TCP/IP

To fight this perfect storm Billions of dollars are being spent to simply
stay current. Meaning that the legit systems are constantly being
assaulted by botnets comprised of hacked unpatched computers and networks
have to respond to new emerging threats arising from the sea of unpatched
computers.

It is simply prudent to realize the nature of the situation and allow all
windows systems to be patched or at the very least someone should offer
3rd party alternative patches to bootleg since we know they will not buy
Windows and they are being exploited.





.

Relevant Pages

  • Re: Why not patch all windows and not just legal copies
    ... Security is about reducing attack surfaces, ... dont patch ... Can we harden Windows to resist arbitrary attacks? ... of windows the ability to patch their computers. ...
    (microsoft.public.security)
  • Re: Why not patch all windows and not just legal copies
    ... Security is about reducing attack surfaces, ... dont patch ... Can we harden Windows to resist arbitrary attacks? ... windows the ability to patch their computers. ...
    (microsoft.public.security)
  • Re: Why not patch all windows and not just legal copies
    ... Now that reasoning is flawed. ... dont patch ... Can we harden Windows to resist arbitrary attacks? ... windows the ability to patch their computers. ...
    (microsoft.public.security)
  • Re: Demand That Microsoft Sell No Code Before Its Time
    ... > would find that linux vulnerabilities are on the up. ... >> Gate$ a chance to fix a lame product with patch after patch after ... >> patch as they continue to struggle to keep their computers working. ... Windows is less secure just because it is installed on 95% of all PCs. ...
    (microsoft.public.windowsxp.general)
  • Re: WGA Questions
    ... > validation, either their dowloads will be accessable by go to a direct ... >> paid for Windows feel good about having paid for it. ... Say a small computer builder reuses OEM Keys on its computers, ... Different info based on the WGA info validation supplied? ...
    (microsoft.public.windowsxp.general)