Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft Escapes Kaspersky's Top 10 Vulnerabilities List

Posted by timothy on from the or-maybe-it-goes-without-saying dept.

An anonymous reader writes "Security firm Kaspersky has released its latest IT Threat Evolution report. There were some interesting findings in the report, as always, but the most interesting thing that stuck out was all the way at the bottom: 'Microsoft products no longer feature among the Top 10 products with vulnerabilities. This is because the automatic updates mechanism has now been well developed in recent versions of Windows OS.'"

3 of 112 comments (clear)

  1. auto-updates of java by Tim+Ward · · Score: 4, Informative

    But you can't do auto-updates of Java, otherwise other stuff on your machine stops working.

    Java is sufficiently flaky that it's very common for particular applications to need particular versions very carefully installed and configured, so you end up with several versions on your machine - allowing auto-update is a recipe for utter chaos.

    1. Re:auto-updates of java by Carcass666 · · Score: 4, Informative

      But you can't do auto-updates of Java, otherwise other stuff on your machine stops working.

      Java is sufficiently flaky that it's very common for particular applications to need particular versions very carefully installed and configured, so you end up with several versions on your machine - allowing auto-update is a recipe for utter chaos.

      This. For those running eBusiness Suite and also have to use sites with applets, companies are caught between the rock of having to update Java to keep your browsers happy and the hard place of incompatibility of applications with newer versions of Java. Yes, you can load multiple versions of Java, but keeping things automatically updated, and keeping each application/browser using the correct JVM? Ouch. The recent issues over the past few months with poorly executed changes in the security model (broken applets that leverage AJAX), Apple's insistence (now abandoned) on distributing its own, outdated Java, and the mediocre UI stack make Java on the desktop a nightmare. I love my glassfish servers, but Java needs to be abandoned on the desktop. I think most people have given up on "write once, run anywhere", they would settle for "write once, run consistently". The Java brand suffers because of the desktop nonsense, which is a shame because it is so powerful and useful on servers.

    2. Re:auto-updates of java by jbengt · · Score: 4, Informative

      #Java is sufficiently flaky that it's very common for particular applications to need particular versions very carefully installed and configured . .

      Exactly. I do work for a client that uses Primavera - which we have to access thru a browser for all records and communication on their construction projects. A recent update to their installation required us to install a very particular Java version that is not at all up-to-date or secure, fuck whatever else we might need Java for. The kicker is that both Java and Primvera are Oracle products.