Simple. The End User License Agreement absolves Micrsosoft of all responsiblity for defects including ones they have been NOTIFIED ABOUT. The entire security community is very good about informing the secure@microsoft.com team about vunerabilities. For that matter so is/. the WSJ and CNN. Every copy of there software ships with a get out of jail free card.
You evidently don't have a lot of data to backup. My nightly backups are almost half a terabyte. If I didn't reuse media, I would have a very hard time getting my budget approved. Media isn't cheap. 100 tapes is $10,000.00. Write once is nice but doesn't work in real life. Unless you have small amounts of data that fit on one TAPE or DVD. And if you have to store your backups (we have to store offsite for 7 years) you would be paying 2 arms and 3 legs in storage and handling fees.
I'm sorry? It won't be super destructive? May I ask what you define as a super destructive virus? Overwrting the contents of all MS Office documents (not just deleting them) is extremly devestating. Even with backups the time it would take to restore the files would be a lot of downtime. Then you look at all the people who don't have backups. People and businessess. That could result in serious economic damage as companies are forced to re create there entire business.
Was your post meant as a joke or...? You evidently have never had to recover from a virus infection of any magnitude. I have and its not easy. It takes time and its a race against the clock.
You cite a couple very narrow scenarios in your post. Major investment banks and SAP installations. As far as SAP they released MaxDB which is what they base SAP on. MaxDB and MySQL are very closely related. As far as investment banks I don't know enough about what they use. And they probably wouldn't reveal that anyway. However it is used by a lot of high traffic sites as the MySQL website clearly documents: http://www.mysql.com/why-mysql/case-studies/
The organization I work for runs MSSQL Oracle and MySQL. Guess what database is used as the core of our business and would cause the most impact if it was unavilable? MySQL. Guess which database has given us the most problems in the terms of deployment/configuration/crashes? Oracle. Guess which database hasn't had any issue (at least that I know of) MSSQL. Kind of opposite of what you would expect huh?:)
What is this girlfriend/wife/female friend thing you speak of? Where do i download one?
Now I can make jokes like this cause I am married to a very amazing wife who happens to be quasi nerdy.:)
They haven't seen a female before. Thats the problem. These gamers are loosers Everyone knows that. They sit in front of there computer all day and consume junk food and play games. They dont' code. They don't do anything productive. So when they actually get up from gaming and go to a show (most likely on there parents dime) they see girls and go crazy.
I find that very hard to believe. You are telling me that Fox doesn't use source control? And your telling me that in an interview they tell you that your going to be coding the first day? That is so ridiculous its not even funny. No one is going to be working on the first day.
And you would be under the leadership of a senior programmer. Who knows the system. Here is a litmus test: What language is MySpace coded in? Mmmm? Yeah I didn't think you knew that. Stop cluttering slashdot with posts that say you know it all or have an "inside track". You don't.
No. Never!!! They must be stopped. Slashdot is a high quality site with lots of useful content and posts that are insightful and add meaning and value to a discussion. I must write exploits to wipe myspace from the face of the earth. The resulting flood of people complaining on livejournal will cause it to melt down. And they thought a slashdotting was bad. Hah! Those won't be dummy accounts that are getting created and used. No they will be real accounts. Of course the scary thing is that all these kids will get together and pay someone to build another myspace using the LJ code. Then it will rise up and overtake the world. Grrr. I thought I had it all figured out.
*shakes head* I wonder why she married you? mmmm? What the poster meant by this was that his wife spends the money out of his wallet. Not that she literally empties it out/inspects it. You need to ligthen up my friend.
What new technology? Refreshing web pages? Wow..... talk about misinformed:)
*goes into liberal mode*
We need to look at why he was doing this. The web page must have harmed him at some time.
He must be having a bad child hood. Perhaps he had a bad experience with computers.
*wakes up from liberal mode*
Wow. That was scary.
Wow. They must have a super slow file system if they are just now getting the results of the tests and the first half of the article ran in the first half of last year!:) This is supposed to be funny by the way.
This is a very good way to assess risk. A great way to build a threat matrix.
A couple comments:
I would add another qualification to your evaulation criteria. Has this bug been actively exploited and/or is exploit code (even proof of concept) available?
So:
A Level 1 or 2 would get immediate attention from me. I would drop what I was doing file an emergency ECN and then test and deploy the patch.
Anything 3 or below would be updated during my next regular update cycle/maintence window (twice a month).
However anything with an active exploit regardless of severity level would be patched immediately.
Just my input.
Why don't Google and Microsoft merge already!?!?
I mean think about it for a minute. They are fighting each other like crazy. The only way they can both realize there goals and make tons of money easily is to merge. No more fighting. No more out bidding each other. Or put another way
Google/Microsoft Market capatilzation: 200 Billion Dollars.
No more slashdot stories about M$ Google wars: Priceless
Google wants to index every bit of information everywhere. Video. Audio. IM. E-mail. HTML/XML/PDF/DOC/XLS/PPT on and on and on.
Microsoft wants Windows on every computing device out there.
What better way to accomplish both those goals then to merge? Oh you want powerful anytime/anywhere access to your info? Well just install Glindows 2007. Oh yeah we strip the metadata out!;)
Can you say big brother?
In soviet russia Python googles beowoulf clusters on Linux!
But seriously. Why is google hiring the head of python? It seems very interesting. The speculation that they are creating a language is an interesting idea. However it seems very unlikely in my opinion. I mean why create a new language?
Google is moving at a very rapid pace and I don't think it can sustain this level of activity for a very long time. But then I don't know what there management setup is like. If they have flattened it like a startup.
Slashdot Mirror
Simple. The End User License Agreement absolves Micrsosoft of all responsiblity for defects including ones they have been NOTIFIED ABOUT. The entire security community is very good about informing the secure@microsoft.com team about vunerabilities. For that matter so is /. the WSJ and CNN. Every copy of there software ships with a get out of jail free card.
You evidently don't have a lot of data to backup. My nightly backups are almost half a terabyte. If I didn't reuse media, I would have a very hard time getting my budget approved. Media isn't cheap. 100 tapes is $10,000.00. Write once is nice but doesn't work in real life. Unless you have small amounts of data that fit on one TAPE or DVD. And if you have to store your backups (we have to store offsite for 7 years) you would be paying 2 arms and 3 legs in storage and handling fees.
I'm sorry? It won't be super destructive? May I ask what you define as a super destructive virus? Overwrting the contents of all MS Office documents (not just deleting them) is extremly devestating. Even with backups the time it would take to restore the files would be a lot of downtime. Then you look at all the people who don't have backups. People and businessess. That could result in serious economic damage as companies are forced to re create there entire business. Was your post meant as a joke or...? You evidently have never had to recover from a virus infection of any magnitude. I have and its not easy. It takes time and its a race against the clock.
Ladies and gentlemen the parent /. post is an example of your tax dollars at work :)
You cite a couple very narrow scenarios in your post. Major investment banks and SAP installations. As far as SAP they released MaxDB which is what they base SAP on. MaxDB and MySQL are very closely related. As far as investment banks I don't know enough about what they use. And they probably wouldn't reveal that anyway. However it is used by a lot of high traffic sites as the MySQL website clearly documents: http://www.mysql.com/why-mysql/case-studies/ The organization I work for runs MSSQL Oracle and MySQL. Guess what database is used as the core of our business and would cause the most impact if it was unavilable? MySQL. Guess which database has given us the most problems in the terms of deployment/configuration/crashes? Oracle. Guess which database hasn't had any issue (at least that I know of) MSSQL. Kind of opposite of what you would expect huh? :)
And I just saved a bunch of money by switching to Geico... uh I mean using
Flawfinder.
You need to relax. The poster was attempting to make a joke. That is how some people deal with traumatic situations.
What is this girlfriend/wife/female friend thing you speak of? Where do i download one? Now I can make jokes like this cause I am married to a very amazing wife who happens to be quasi nerdy. :)
I don't see what age or degree or gender has to do with anything?
Do they have a policy against posting to /. at work? :)
They haven't seen a female before. Thats the problem. These gamers are loosers Everyone knows that. They sit in front of there computer all day and consume junk food and play games. They dont' code. They don't do anything productive. So when they actually get up from gaming and go to a show (most likely on there parents dime) they see girls and go crazy.
Just kidding. Or am I?
Oh you don't want one of those. They are very expensive. Forced upgrades every year. I mean haven't you seen http://www.annoyances.org/exec/show/article09-132 ????
I find that very hard to believe. You are telling me that Fox doesn't use source control? And your telling me that in an interview they tell you that your going to be coding the first day? That is so ridiculous its not even funny. No one is going to be working on the first day. And you would be under the leadership of a senior programmer. Who knows the system. Here is a litmus test: What language is MySpace coded in? Mmmm? Yeah I didn't think you knew that. Stop cluttering slashdot with posts that say you know it all or have an "inside track". You don't.
No. Never!!! They must be stopped. Slashdot is a high quality site with lots of useful content and posts that are insightful and add meaning and value to a discussion.
I must write exploits to wipe myspace from the face of the earth. The resulting flood of people complaining on livejournal will cause it to melt down. And they thought a slashdotting was bad. Hah! Those won't be dummy accounts that are getting created and used. No they will be real accounts. Of course the scary thing is that all these kids will get together and pay someone to build another myspace using the LJ code. Then it will rise up and overtake the world. Grrr. I thought I had it all figured out.
*goes back to drawing board*
If your in a Farday cage how are you posting online? Huh? Answer that! Hah!
*shakes head* I wonder why she married you? mmmm? What the poster meant by this was that his wife spends the money out of his wallet. Not that she literally empties it out/inspects it. You need to ligthen up my friend.
What new technology? Refreshing web pages? Wow..... talk about misinformed :)
*goes into liberal mode*
We need to look at why he was doing this. The web page must have harmed him at some time.
He must be having a bad child hood. Perhaps he had a bad experience with computers.
*wakes up from liberal mode*
Wow. That was scary.
Wow. They must have a super slow file system if they are just now getting the results of the tests and the first half of the article ran in the first half of last year! :) This is supposed to be funny by the way.
This is a very good way to assess risk. A great way to build a threat matrix. A couple comments: I would add another qualification to your evaulation criteria. Has this bug been actively exploited and/or is exploit code (even proof of concept) available? So: A Level 1 or 2 would get immediate attention from me. I would drop what I was doing file an emergency ECN and then test and deploy the patch. Anything 3 or below would be updated during my next regular update cycle/maintence window (twice a month). However anything with an active exploit regardless of severity level would be patched immediately. Just my input.
Believe it or not Dos is still run in production. I know. I have dos machines on my network.
5) Profit. You forgot the most important step. :)
Why don't Google and Microsoft merge already!?!? I mean think about it for a minute. They are fighting each other like crazy. The only way they can both realize there goals and make tons of money easily is to merge. No more fighting. No more out bidding each other. Or put another way Google/Microsoft Market capatilzation: 200 Billion Dollars. No more slashdot stories about M$ Google wars: Priceless Google wants to index every bit of information everywhere. Video. Audio. IM. E-mail. HTML/XML/PDF/DOC/XLS/PPT on and on and on. Microsoft wants Windows on every computing device out there. What better way to accomplish both those goals then to merge? Oh you want powerful anytime/anywhere access to your info? Well just install Glindows 2007. Oh yeah we strip the metadata out! ;)
Can you say big brother?
Well when vista comes out and people start using the metadata I imagine there will be plenty more :)
In soviet russia Python googles beowoulf clusters on Linux!
But seriously. Why is google hiring the head of python? It seems very interesting. The speculation that they are creating a language is an interesting idea. However it seems very unlikely in my opinion. I mean why create a new language?
Google is moving at a very rapid pace and I don't think it can sustain this level of activity for a very long time. But then I don't know what there management setup is like. If they have flattened it like a startup.
Lets see what happens.
welcome our new Firefox loving RSS Icon using overlords.