RE: Learn from history?

["Stuart Fox (DSL AK)" <StuartF () datacom co nz>]

> > > 2. If a patch cannot be installed, find workarounds
> >
> > That does not work with the workarounds customer need to facilitate 
> > life (security <> easy of use, remember)
>
> In the particular case of Sasser, workarounds indicated in KB 
> 835732 and/or making sure TCP 445 is closed to the outside 
> world was enough and not difficult to achieve.
Not it wasn't enough.  It would be until someone dialled to the Internet, or
even to some other third party network that had the virus.  The only thing
that was enough was to patch.  The only people who have the luxury of not
patching are those who have no connectivity from their LAN to any other
network.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html