Re: Security Alert: Unofficial IE patches appear on internet

["Micheal Espinola Jr" <michealespinola () gmail com>]

For those that have inquired:

I wouldn't wish v3dt3n on the Patch Management list in a million
years.  I know PM is moderated, and Ryan does a great job at keeping
things professional and on-topic there - so my remark never struck me
as concern.

Although I added to the initial "list" as a joke, I don't actually
agree with the list: <blank> = <blank>.  Marc and the people at eEye
have provided the community with exceptional information and service
over the years, and I would have a difficult time not trusting them
implicitly considering their their track record, nature for disclosure
and clarity of information.

<soapbox>
3rd party patching is controversial but increasingly helpful for
interim protection against exploits releases that take advantage of
well known patch management scheduling - intentional or otherwise.
Sometimes necessity trumps proprietorship - at least as an interim
solution.
</>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/