full-disclosure - lame bitching about xpsp2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: rodrigo at intellicomp.cl (intellicomp.cl)
Subject: lame bitching about xpsp2

I think you should remember that you don't pay for an apache license and ofcourse that apache's code is there for you to read it and research on it.    I agree with you that an app thats is not up to date will fuck up sooner or later, However the issue here is that microsoft bills you for licensing, don't allow you to read the code, release service packs that fuck up half of their users operating systems and in addition to all this they count with something that is even more damaging, "most of their users trust"... when that small icon shows up next to the clock and tells you that updates are ready to install, do you ever wonder wether that patch could fuck your entire OS..., i dont think a normal home user would. Have you consider that not everyone in the world knows how to reinstall an OS? well, perhaps lots of people with not so many resources will have to pay someone to reinstall their computers OS because microsoft sent out a patch that wasn't properly working. 

They are disrespecting their customers when they do this kind of shit, and if you are paying for something and they release buggy service packs (which are not hotfixes but mayor stuff)ofcourse you have the right to tell everyone that they SUCK BIG TIME!. 

They should at least verify that their patches don't break their own products.

Regards

Rodrigo.-

Niek Baakman <niekbaakman@...e.nl>  :

> MS web server full of damn holes? What about apache ?
> What do you think would happen if you do not update your apache for a year,
> or openssh, or any piece of software ?
> What do you think would happen if you did not apply those MaxOSX updates
> which Apple released over the past few months?
> Don't talk about releaking and only mention Microsoft.
> There are opensource programs which have the same track record.
> 
> All comes down to staying up-to-date, and patch.
> 
>  > Beside, the unix based permissions system has proven far superior, ask
> 
> I'd say NTFS is pretty advanced too. In some ways it is better.
> 
>  > apple. Still shameful that the default XP install, in 2004, at these
>  > malware times, still logs you as an administrator . Would you feel safe
>  > using ur *nix box as root everyday ? I wouldn't.
> 
> XP install asks for an administrator password, *and* to add one, or more normal
> 
> users. I see the same behavior in some Linux distributions. (e.g. slackware
> does 
> not ask you to create a user account during install).
> 
> Kind regards,
> 
> Niek Baakman
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html