Comments on: Microsoft Finds New Windows Security Flaws

By: Boyd

Boyd — Wed, 31 Dec 1969 18:00:00 +0000

Don't forget that the reason there were a "host" of vulnerabilities (four is a "host?") addressed yesterday is because Microsoft recently changed how they handle security updates, as mentioned in the Post article. Instead of issuing them as they occur, they're grouping them together for the release on the second Tuesday of every month. If they feel a vulnerability is too severe to wait that long, they'll issue that fix immediately.

By: BigFire

BigFire — Wed, 31 Dec 1969 18:00:00 +0000

Yep. Only took 2 hours to download 3MB of fixes... People must have really hammered the update web site.

By: McGehee

McGehee — Wed, 31 Dec 1969 18:00:00 +0000

But one would think that, once a piece of software has been on the market for several years, the kinks would have been ironed out.

Logically, it would seem that since updates designed to fix vulnerabilities are often rolled out more hastily than the original operating system, the problem may be that a lot of the recent vulnerabilities were opened by past updates.

By: melvin toast

melvin toast — Wed, 31 Dec 1969 18:00:00 +0000

Fixing security flaws isn't their priority. XP is the 3rd complete rewrite I think and it seems to have MORE flaws than older versions.

One of the main problems is that Windows was originally a single user system and each new version is designed to be 100% compatible with software that runs on older versions. Apple bit the bullet to go from OS9 to OSX. Bill isn't interested in doing that because when you have a monopoly there's really no benefit to improving quality.

By: TM Lutas

TM Lutas — Wed, 31 Dec 1969 18:00:00 +0000

The lack of stability and security is probably a major reason why about 40% of their customers are looking for a way to exit the Microsoft software ecology. Eventually they will find a way.

By: capt joe

capt joe — Wed, 31 Dec 1969 18:00:00 +0000

yeah, the bimonthly security upgrade.

That is why I run my own site on a set of clustered linux and solaris machines.

---