full-disclosure - Re: Microsoft Security, baby steps ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: BlueBoar at thievco.com (Blue Boar)
Subject: Re: Microsoft Security, baby steps ?

Nick FitzGerald wrote:
> Perhaps, but I doubt it...  I can't see the bandwidth costs (at the 
> relatively high discount rate MS must get for all its bandwidth) of the 
> necessary downloads for all those unpatched users who order this CD 
> outweighing the P&P for fulfilling the CD orders.
> 
> I think MS has finally realized that while dial-up users are not at all 
> likely to get the large security updates (IE version upgrades, OS 
> service packs), they can be significant combined part in the overall 
> problem of unpatched machines.  This is the easy way for such users to 
> "catch up" (it's just a pity that there is such a huge lag between MS 
> freezing the disk's contents and pressing and shipping it -- for moost 
> Xp users it will arrive about a wek before they face downloading SP2 
> and that is likely to be around 150MB I hear...).

It's a good start.  I've got the disk on order, it will be a nice 
jump-start for all the home users' machines with modems that I maintain 
for friends and family, new installs, etc...

Now, I just need an ISO image I can download once a month or so.  Yeah, 
right after the 2nd tuesday of the month would do it.

I imagine the security community would have created this long ago if MS 
would let other people distribute their patches.

						BB