Patching catch 22

Prime example last week of why patching is sometimes a whole lot more complicated than it seems to be from the outside.

Tuesday was patch day. For many of us in the Eastern Time Zone, who set Automatic Updates to pick up patches overnight, it’s really Wednesday for all intents and purposes. So Weds. would be the first chance to test a patch. On Thursday I saw the story in my RSS reader about exploits already being out in the wild. Friday, I spotted the story about what the MS patch might actually break if you apply it. So you should have applied it immediately, because if you don’t your users will be vulnerable to existing exploits, but you should test it before you give it to them, because it might break stuff.

Yeah, good luck with that!

Tags: PatchTuesday

Similar Posts

  • Not today…

    Naturally when I arrived in the office this morning, my own website was down, email servers and everything. Not a good way to start the day, but about 30 minutes later it seems to be back in working order again. Whew! I did, yesterday, get the old comments exported from YACCS and after some clean…

  • Doppler

    Doppler 2.0 RC1 is out. I downloaded it this morning and checked for the bug that I had to work around in 1.1.1 involving using space savers by date, and sure enough it’s fixed. And that’s not even the best part about it. It also supports multi-threaded downloads, resume downloads, and comes with a light…

  • Guaranteed listener

    OK, I admit it, I’m a sucker. I know I’m not the only one out there either. Yeah, I’ll be listening to Kevin’s podcast later today, simply because he blogged about it and said that I was mentioned in the program. Like you wouldn’t be tuning in to see what he said about you… 🙂…

  • Interesting questions.

    The recent news that the RIAA wants ISP’s to start paying a tax for their customers file sharing raises a number of interesting questions. To me, this has always been the “tipping point” of sorts for the whole file-sharing question. It was inevitable that the RIAA and MPAA would go after ISP’s. There’s no cost-effective…

  • Switch over

    I officially switched the RSS Feed over to the new BloggerPro version of it, since it came out of Beta and into production. Now if you click the little “XML” image on the right side, you’ll go to that feed instead of the old one. The old one will continue to work for now, but…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)