full-disclosure - Web sites compromised by IIS attack

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

From: aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [ Aditya Lalit Deshmukh ])
Subject: Web sites compromised by IIS attack

> > Right. But we also need better methodologies for vendors to fix their
> > products. The emphasis here is on "the vendor fixing the broken
> > product". It should not be a burden on the consumer, but on the vendor.
> > 
> 
> Like I said, Do you REALLY want a vendor to install patches for you?

i would never trust any patch from red hat / sun system / microsoft  without actually testing it on a sacrificial lamb before going in production use. 



??????????????????????????????????????????????????????
?b???v?"?.axZ?x??????Gb?*'??.?[kj???.?j)m???r??