[NTLUG:Discuss] How can it be M$'s fault! They put out a patch!

[Chris Cox]

The thing I don't like about the way they talk about the patch, is
that the underplay the need to wipe out the disk and reinstall.
If CR2 was on your machine, it could be quite difficult to ascertain
what all got trojaned on the box (I'm not saying it's impossible,
but certainly in the realm of "why even try when you can't be 100%
sure").  To their credit they now have a document posted that
tells you about the problem... but again, they make it sound like
a few folks may have to reinstall.... but the implication is
that it's probably not something you will need to do.

Agreed on the fact that *ix programs have problems.  The telnetd
bug is a BIG one! (affects everyone's telnet.. even Linux!).  It
was interesting to read Sun's response on the telnetd... they said
that they couldn't say whether or not they were affected... they
just knew that the buffer overflow sample caused their telnetd to
crash.... well, duh...

Regards,
Chris

Richard Geoffrion wrote:
> 
> While I think it is technically idiotic to rely on an M$ product for
> business purposes, M$ did after all provide a patch.
> 
> Oh sure, they enabled services by default but SO WHAT!
> 
> If I run BIND 8.2.2 straight off of the Slack distro CD, I'll get rooted!
> What's the difference!
> 
> OH BUT M$ HAS A HISTORY OF RELEASING CRAPPY PRODUCTS!
> 
> Well, as I see it so has SENDMAIL and ISC.  Hey, I run the product, I have
> to keep it safe. (or I have to switch products.....just as soon as things
> settle down....it's QMAIL time!)  See!  problem solved.
> 
> Maybe M$ can include an automatic manditory patch update feature in the next
> release of their OS.  Heck, they're already trying to control everything
> else.  They might as well control something that does someone some good!
> 
> These jumbled and incoherent thoughts brought to you by a Cisco switch
> upgrade at an Irving based bank.  See what happens when you wake up and get
> to a customer site before the world wakes up!  It makes one defend the great
> Satan!
> 
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss