Slashdot Mirror


Microsoft Kills Off Security Bulletins (computerworld.com)

Microsoft has officially retired the security bulletins this week, which were issued to detail "each month's slate of vulnerabilities and accompanying patches for customers -- especially administrators responsible for companies' IT operations," writes Gregg Keizer via Computerworld. "The move to a bulletin-less Patch Tuesday brought an end to months of Microsoft talk about killing the bulletins that included an aborted attempt to toss them." From the report: Microsoft announced the demise of bulletins in November, saying then that the last would be posted with January's Patch Tuesday, and that the new process would debut Feb. 14. A searchable database of support documents would replace the bulletins. Accessed through the "Security Updates Guide" (SUG) portal, the database's content can be sorted and filtered by the affected software, the patch's release date, its CVE (Common Vulnerabilities and Exposures) identifier, and the numerical label of the KB, or "knowledge base" support document. SUG's forerunners were the web-based bulletins that have been part of Microsoft's patch disclosure policies since at least 1998. Microsoft did such a good job turning out those bulletins that they were considered the aspirational benchmark for all software vendors.In February Microsoft canceled that month's Patch Tuesday just hours before the security updates were to reach customers, making the bulletins' planned demise moot. Microsoft kept the bulletins the following month as well, saying it wanted to give users more time to prepare for the change to SUG. Finally, when Microsoft yesterday shipped cumulative security updates for Windows, Internet Explorer, Office and other products, it omitted the usual bulletins.

1 of 89 comments (clear)

  1. Re:Security you say? by Anonymous Coward · · Score: 0, Flamebait

    You couldn't be more wrong. Acceptance of the Gnu Eula requires a vow of poverty. You must not make any money by use of Gnu software such as Emacs and gcc. In fact, use of Gnu in the financial sector is strictly forbidden for any reason. The vow of poverty has been proven enforceable by highly respected academic professors of law, and you risk total asset forfeiture if you violate it. Should you choose to use Gnu, you must follow the lifestyle of the project founder Stained Dick "Bathroom" Stall-Man. His way is the simple way of coding all night, sleeping all day, begging on the street, and eating his own shit. You too can be a successful follower of the luminary figure "Bathroom" Stall-Man, as soon as you renounce money.