full-disclosure - Re: Microsoft Security, baby steps ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: pauls at utdallas.edu (Paul Schmehl)
Subject: Re: Microsoft Security, baby steps ?

----- Original Message ----- 
From: "Nick FitzGerald" <nick@...us-l.demon.co.uk>
To: <full-disclosure@...ts.netsys.com>
Sent: Tuesday, March 16, 2004 8:15 PM
Subject: Re: [Full-Disclosure] Re: Microsoft Security, baby steps ?


>(it's just a pity that there is such a huge lag between MS
> freezing the disk's contents and pressing and shipping it -- for moost
> Xp users it will arrive about a wek before they face downloading SP2
> and that is likely to be around 150MB I hear...).
>
As an aside, this is a problem with just about all software.  By the time
they freeze the "contents", warehouse it, ship it to distributors who ship
it to the retailers, who sell it to the consumer, the first thing they have
to do after installing is update.  That's why the online download model is
so much better (although even *it* isn't perfect.)  If you've ever worked in
a "shared" programming project, I guess you can understand the problem of
versioning and how that affects the "end product", but it's still
frustrating, especially on the corporate level, where constant updates are a
way of frustrating life.

Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/