Full Disclosure mailing list archives
Re: 3 new MS patches next week... but none fix
From: Tim <tim-security () sentinelchicken org>
Date: Fri, 9 Jan 2004 20:44:04 -0800
Time for me to get on my soapbox too. What are the three patches, what's your source of information, and do they fix things readers of this list need to know about? Less gossip, more information, please.
Sorry if you consider this to be more gossip. I know nothing of these 3 patches being released, but I thought this bit of background might be illuminating: A certain very large vendor has been trying to court my company, and during small talk over lunch, we mentioned we were very busy with the M$ patch batch of the month. In a little mum's-the-word response, the vendor representative implied that they could make that problem "go away" with something they called "virtual patches", which he was quite smug about. I was very confused at first, as he didn't appear to be trying to sell a specific product, but when I ran the conversation back through my mind, I realized that M$ must be giving pre-release information to major vendors. Probably for a heafty price tag. This is sickening to me. M$ likely is making money off of their own liability. This is very similar to the bullshit trick the ISC has been pulling with BIND. In any case, this may be the source of the leaks. Not that this 3rd or 4th hand information should be trusted, but it might explain the source. cheers, tim _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: 3 new MS patches next week... but none fix Randal, Phil (Jan 09)
- Re: 3 new MS patches next week... but none fix Exibar (Jan 09)
- Re: 3 new MS patches next week... but none fix Tim (Jan 09)
- Re: 3 new MS patches next week... but none fix madsaxon (Jan 09)
- RE: 3 new MS patches next week... but none fix Joe (Jan 10)
- Re: 3 new MS patches next week... but none fix Tim (Jan 10)
- RE: [inbox] Re: 3 new MS patches next week... but none fix Exibar (Jan 10)
- Re: [inbox] Re: 3 new MS patches next week... but none fix Tim (Jan 10)
- Re: [inbox] Re: 3 new MS patches next week... but none fix Jan Lühr (Jan 10)
- The Israeli Post Office break-in ge (Jan 11)
- Re: [inbox] Re: 3 new MS patches next week... but none fix lonely wolf (Jan 10)
- Re: [inbox] Re: 3 new MS patches next week... but none fix Ron DuFresne (Jan 12)
- Re: [inbox] Re: 3 new MS patches next week... but none fix William Warren (Jan 11)