Vulnerability Development mailing list archives
RE: Publishing Nimda Logs
From: "Paul_Asadoorian" <paul () ubeer net>
Date: Tue, 7 May 2002 18:57:22 -0400
I agree, auto update is a bad idea. See this http://www.eweek.com/article/0,3658,s=712&a=25733,00.asp article for info on how windows update actually _reomved_ patches due to a bug. The irony of it all is that it removes the patch that fixed a vulnerability in which Nimda exploits! Paul -----Original Message----- From: unprivileged user [mailto:jsbloom () adelphia net] Sent: Tuesday, May 07, 2002 6:20 PM To: zeno Cc: vuln-dev () securityfocus com Subject: Re: Publishing Nimda Logs On Tuesday 07 May 2002 17:06, zeno wrote:
Here is an idea. Perhaps make windows do updates every 5 minutes in default install. Problem solved. - zeno () cgisecurity com
Aacckkk! No! Windows XP Pro has the automatic update service enabled by default and that is a BAD idea. I want to know what patches are going to be installed before they reach my production servers. For one thing I don't want to install things that don't apply to my system. For another patches are not always tested sufficiently (NT4 SP2 anyone?) I would prefer that Microsoft leave this function out of the default install and opt for "inform me when a patch is available" mode instead. They can even make it red and flashy and say "critical" but don't install it for me.
Current thread:
- Publishing Nimda Logs Deus, Attonbitus (May 07)
- Re: Publishing Nimda Logs H C (May 07)
- Re: Publishing Nimda Logs Matthew McGehrin (May 07)
- Re: Publishing Nimda Logs Luis Pinto (May 07)
- Re: Publishing Nimda Logs RSnake (May 07)
- Re: Publishing Nimda Logs Blue Boar (May 07)
- Re: Publishing Nimda Logs zeno (May 07)
- Re: Publishing Nimda Logs unprivileged user (May 07)
- RE: Publishing Nimda Logs Paul_Asadoorian (May 07)
- Re: Publishing Nimda Logs RSnake (May 07)
- RE: Publishing Nimda Logs Matt Andreko (May 07)
- Re: Publishing Nimda Logs Johannes B. Ullrich (May 07)
- Re: Publishing Nimda Logs Blue Boar (May 07)
- Re: Publishing Nimda Logs ash (May 07)
- Re: Publishing Nimda Logs Laurence Brockman (May 08)
- Re: Publishing Nimda Logs ash (May 08)
- Re: Publishing Nimda Logs Laurence Brockman (May 08)
- is: whois tricks was : Publishing Nimda Logs Matthew McGehrin (May 08)
- RE: whois tricks was : Publishing Nimda Logs Steve Zenone (May 08)
- Re: whois tricks was : whois is what? Matthew McGehrin (May 08)
- Re: Publishing Nimda Logs H C (May 07)