full-disclosure - Web sites compromised by IIS attack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [ Aditya Lalit Deshmukh ])
Subject: Web sites compromised by IIS attack

> > Right. But we also need better methodologies for vendors to fix their
> > products. The emphasis here is on "the vendor fixing the broken
> > product". It should not be a burden on the consumer, but on the vendor.
> > 
> 
> Like I said, Do you REALLY want a vendor to install patches for you?

i would never trust any patch from red hat / sun system / microsoft  without actually testing it on a sacrificial lamb before going in production use. 



??????????????????????????????????????????????????????
?b???v?"?.axZ?x??????Gb?*'??.?[kj???.?j)m???r??