Microsoft: Patches, Patches Everywhere!

Ridgelift writes "Even though Microsoft's recently announce they would not be issuing any new patches for the month of December, the boys at Redmond were scrambling today to figure out why some systems are being patched. The reason? They haven't got a clue."

Comments

The apparent lack of a patch.

[Neck_of_the_Woods]

I guess they are going to have to issue a patch to stop the machines from patching....ironic.

Re:The apparent lack of a patch.

[0WaitState]

We once again apologize for the fault in the patch process. Those responsible for patching the patchers who have patched the patch process, have now been patched.

Re:The apparent lack of a patch.

[Joe the Lesser]

Patch bites can be preti nasti mind you

Curious

[bluedust]

Imagine a Microsoft product doing something without reason...

Where is Edward James Olmos?

[charlieo88]

So the computers are patching themselves now, are they?

When exactly was it that the Cylons are supposed to attack?

Transcript

[blogboy]

"Hey Bob...did you patch this?" "No, I thought you did." "Phil!" "What?" "Is this your patch?" "Not me. No patches in December, remember? It's our gift to the world." "Then who the hell...hey Eddie!" "Not now...I'm trying to track down this patch..." "Crap."

Fin.

And...

[Nom du Keyboard]

It moved to a fixed schedule of monthly patches to make the process more predictable for network and system administrators.

...and virus writers.

It's not a patch

[spidergoat2]

It's an undocumented upgrade.

It' MS's fault

[nytes]

They keep sending me those security patches in email, and I keep applying them. I wish they'd stop it.

Obligatory Treasure of the Sierra Madre quote

[adso]

Patches? We don't need no stinking patches!

Addendum

[tds67]

In October, Microsoft committed to making its patch-release schedule more regular, by only publishing patches on the second Tuesday in each month.

In other news today, the Cracker community announced it would commit to new virus and worm releases on the second Wednesday in each month.

Re:The reason ?

[frodo from middle ea]

I just want to be the fly on the wall of M$'s office

Patch Officer :- Sir, Out windows update service has issued a Patch today.
Billy G :- But I said NO Patches in month of Dec.
Patch Officer :- Yes Sir, but the patch issuing s/w has a bug, We need to patch it ASAP.
Billy G :- But I said no patches in Dec , damn it.
Patch Officer :- But then we won't be able to prevent the windows update service from issuing the first patch
Billy G :- READ MY LIPS man, NO patches in Dec.

Shall we say patch-22 :-)

Windows Update became self-aware!

[BigGerman]

head for the hills

How I read it

[swb]

I read this in October:

In case you didn't get a chance to review the statement from Steve Ballmer last week, I will try to bring you all up to date on the new process for security alerts.

The net of this all is that Microsoft is moving to a monthly security bulletin release schedule. This change was in response to customer feedback.

After today, we will be releasing security bulletins on the second calendar Tuesday of every month. Today was the starting day, and was an exception.

There are a couple of benefits to this new process:

1) Switching to a monthly release cycle for security patches allows customers to install multiple patches with a single install and single reboot (using Qchain.exe, Update.exe and other similar tools). This will minimize downtime on mission-critical systems and will allow customers to consolidate the patch deployment to once per month.

2) Another benefit of the monthly cycle is that it offers customers more time between releases of security patches. This allows customers to evaluate, test and install patches in their computing environments in a timely manner. The release schedule is also more predictable and allows customer to plan in advance for deploying patches.

You may notice as well that the format of the bulletins has changed, so when you view the bulletin from the link inside of the security alert email, you will notice the sections of the bulletins have changed a bit.

The change in this process is in order to make it more predictable for our customers so that you can plan and implement patches as quickly as possible.

If you have any feedback on this new process, please feel free to let me know and I will pass it along to the security team directly.

Which I translated as:

We were so humiliated by the never-ending barrage of security vulnerabilities in our products that in order to enable our sales force to make any headway at all against Linux/IBM/Sun we decided to bundle all our security vulnerabilities into a once-per-month release. Our analysis of MSN News and Entertainment Tonight indicates that on our chosen date, the second Tuesday of the month, people are much more likely to be preoccupied with Ben 'n' Jen and the previous day's sporting events, and will easily overlook the most recent worm/virus/breech attributable to our bloated, unmanageable software base.

The other reasons for the new monthly cycle are that since we'll be dumping more patches into a single file, you'll need more time to debug, back out or ultimately rebuild systems corrupted by patches that will also include special new "features". We also think that our new monthly cycle will coincide with your or your spouses' monthly cycle, allowing you to be victimized by uncontrolled emotional outbursts in one tidy week, instead of having it spread out all over the month.

Thanks again for buying Microsoft.

Patches....

[Dj]

Patches want to be free!

This is the first action of the Patch Liberation Front!