RSSMicrosoft: No Security Fixes for March
By David Worthington | Published March 3, 2005, 7:47 PM
No need to beware the Ides of March. Microsoft's Security Response Center has given advance notice to customers not to expect any security patches for this month. In comparison, February produced the second largest crop of security bulletins since Microsoft moved to its system of aggregated monthly updates.
"On 8 March 2005 the Microsoft Security Response Center is planning to release no new security bulletins," reads the notice. Instead, Microsoft will be hosting a security webcast on March 9 to answer customer questions about the company's patch cycle. According to security firm Secunia, 20 vulnerabilities remain in Internet Explorer 6 alone.
Does this mean they are working on a service pack instead of small updates? Have they given up on regular security updates, since users often don't install them? They should be worried at least about IE6, unless IE7 is coming out VERY soon, though many people who use Windows Update use a browser other than IE.
Score: 0
|Does this mean they are working on a service pack instead of small updates?
-----NO. Development of a service pack has no bearing on development of hotfixes. It's the other way around, in fact... hotfixes are what delay service packs.
Have they given up on regular security updates, since users often don't install them?
-----NO. Such a thought is absurd. Users neglect to install them out of ignorance... they are not aware or educated on the risks, so they ignore what they are not aware of.
They should be worried at least about IE6, unless IE7 is coming out VERY soon, though many people who use Windows Update use a browser other than IE.
-----This comment is absurd, and this is not possible since Windows Update requires ActiveX, and no other browser supports it but IE.
All that being said, I won't even speculate on Microsoft's plans nor their methods. I patch as often as they're available, and I focus on other means of security such as firewalls, and intelligent browsing habits that don't involve software and websites that infest my PC with Spyware and other plagues.
Score: 0
|I think the point compm375 was trying to make about windows update was that most people smart enough to use it regularly also know better than to use IE as their main browser and only use IE for the windows update feature.
Score: 0
|honestly i couldn't detect a point in all that ignorance from compm375.
the reason ms switched to monthly updates is to give people 12 times a year to check for updates instead of 365.
service packs are snapshots that contain previously released bug/security fixes and possibly new bug/security fixes and new features.
the ie7 beta is due in the summer as i recall. soon enough?
if your product of choice is superior then why do you feel the need to spread propaganda?
Score: 0
|"-----This comment is absurd, and this is not possible since Windows Update requires ActiveX, and no other browser supports it but IE."
This is not completely true, there is in fact a small ActiveX plugin for Mozilla :-)
Score: 0
|"if your product of choice is superior then why do you feel the need to spread propaganda?"
Smartest thing I've heard all day.
Score: 0
|Agreed lol. I spread said "propaganda" because I support the superior software, and want other people to have the functionality (and at the very least teh security) of it.
I want to check for updates 365 days out of the year, and not just 12. If there is a vital critical flaw that exists. I want it patched before I know it is there.
Oh yeah speaking of propaganda I havne't said GNU enough lately.
GNU, GNU, GNU, GNU, ...... :D
I actually use the Microsoft OS, so I don't completely hate it, and admit it does have its good points.
Also everyone on here needs to lighten up a bit. Seems people are a little quick to be at ones throat if someone posts something that disagrees with what they post. It's all about seeing eachothers point of view. If "Foul language and personal attacks will not be tolerated." wasn't right about the window I think the replies would be even more nasty. Just a thought...
Score: 0
|Don't be surprised if lots of them are paid to post. I've seen worse (Sending letters of support from dead people comes immediately to mind).
Score: 0
|First of all, I was not giving answers but asking questions. I think you and all the people who followed took these a little too seriously, when I was just wondering if anyone knew the answers. I can back up the reasons for each question I asked.
-Does this mean they are working on a service pack instead of small updates?
I think it would make sense that Microsoft is doing something with security this month and that was the only logical thing I could think of.
-Have they given up on regular security updates, since users often don't install them?
If the previous isn't true, then what can Microsoft possibly be doing?
-They should be worried at least about IE6, unless IE7 is coming out VERY soon, though many people who use Windows Update use a browser other than IE.
I know that Windows Update requires IE, I just meant that people who know their browser has at least 20 vulnerabilities that will not be fixed during this whole month probably are using or looking into using a different browser. Also, IE7 seems like a way for Microsoft to get out of making some security updates if it comes out soon enough.
I guess I shouldn't have asked why Microsoft isn't making security updates this month. The only people that would know would be working for Microsoft and would not be allowed to disclose any imformation. So I guess we all just have to wait until next month.
Score: 0
|