full-disclosure - Re: Fwd: n3td3v has a fan

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 9 Apr 2008 15:04:01 -0400
From: G D Fuego <gdfuego@...il.com>
To: n3td3v <xploitable@...il.com>
Cc: "n3td3v@...glegroups.com" <n3td3v@...glegroups.com>,
	"full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Fwd: n3td3v has a fan

On Apr 9, 2008, at 2:53 PM, n3td3v <xploitable@...il.com> wrote:

> On Wed, Apr 9, 2008 at 7:13 PM, Ureleet <ureleet@...il.com> wrote:
>> where do you come into the equation?
>
> It highlights what i've been saying for _years_ about never trusting
> your employees, and you've got to patch your offline machines as fast
> as your online ones.
>

Patching your offline systems is important, but I wouldn't recommed  
doing it just as fast as your offline ones.

If you have a choice between patching all systems within a month of  
patching online systems within a week, definitely patch the online  
ones faster.

Much like triage in a medical emergency, you should assess your  
patching based on risk.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/