DV Hardware bringing you the hottest news about processors, graphics cards, Intel, AMD, NVIDIA, ATi, hardware and technology!

   Home | News submit | News Archives | Reviews | Articles | Howto's | Advertise
 
DarkVision Hardware - Daily tech news
  Login/sign up  


Main Menu

Home
User account
Info
News archives
Links
Articles
Howto
Reviews
Member list
 

Who's Online
There are currently 211 people and 0 DV-member(s) online.

 

Latest Reviews
  • Enermax Aeolus Premium CP003
  • Altego Clear Laptop Sleeve
  • Lian Li PC-V354
  • Arctic Cooling K381 keyboard
  • Arctic Power Charger Plus
  • ATP PhotoFinder Mini
  • BitFenix Colossus
  • Roccat Taito Kingsize mTw Edition mousepad
  •  

    RSS
    RSS
     

    Microsoft explains seven-year patch delay

    Posted on Saturday, November 15 2008 @ 04:00:03 CET by Thomas De Maesschalck


    A Microsoft security program manager explains why it took the software giant seven years to fix a vulnerability. Apparently, they waited so long because fixing it would have broken customer network applications:
    Christopher Budd, a security program manager in the Microsoft Security Response Center, said in a blog post Thursday that while Microsoft had been aware of the vulnerability, fixing it would have broken customer network applications.

    "When this issue was first raised back in 2001, we said that we could not make changes to address this issue without negatively impacting network-based applications," wrote Budd. "And, to be clear, the impact would have been to render many (or nearly all) customers' network-based applications then inoperable."

    Budd explained that, while Microsoft in 2001 advised customers to use SMB signing, it knew then that the mitigation might not be a usable solution for some.

    "We did say that customers who were concerned about this issue could use SMB signing as an effective mitigation, but the reality was that there were similar constraints that made it unfeasible for customers to implement SMB signing," wrote Budd.
    Source: CNET


     
    Threshold
      
    The comments are owned by the poster. We aren't responsible for their content.
     

    DV Hardware - Privacy statement
    All logos and trademarks are property of their respective owner.
    The comments are property of their posters, all the rest © 2002-2012 DM Media Group bvba