full-disclosure - MS seems to live in the past

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Fri, 23 Jan 2009 07:46:14 +1100
From: Paul Szabo <psz@...hs.usyd.edu.au>
To: full-disclosure@...ts.grok.org.uk
Subject: MS seems to live in the past

Just cute, probably no security implications...

I am in the habit of regularly checking for new stuff on the
"Microsoft Security Advisories" website
  http://www.microsoft.com/technet/security/advisory/default.mspx
Up until a few days ago, it said "Updated December 30, 2008"
or somesuch; cannot remember what the last advisory was, probably
something about SSL certificates.

Checking this morning, it says "Updated: October 23, 2008" and the
last advisory shown there or on
  http://www.microsoft.com/technet/security/advisory/archive.mspx
is dated 14 Oct. For example, the advisory
  Microsoft Security Advisory (960906)
  Vulnerability in WordPad Text Converter Could Allow Remote Code Execution
  http://www.microsoft.com/technet/security/advisory/960906.mspx
is missing.

Did MS revert into the past? (Did their server crash, was replaced
with a not-so-hot-spare, or recovered from old backups?)

Cheers,

Paul Szabo   psz@...hs.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/