Archive for ‘Patching’

3 results.
Oct02

Determina and ZERT blur the third-party patch definition a bit

by Michael Farnum on October 2nd, 2006 at 8:45 pm
Posted In: Patching, Security

I have stated that I do not like thrid-party patches.  Here are some reasons: It can open other avenues of attack, since the bad guy is likely to start studying the thrid-party patch for security holes.  Potential problems caused by the unofficial patch when installing the official vendor patch Management headache of uninstalling the unofficial patch […] ↓ Read the rest of this entry…

1 Comment
Sep05

One of the reasons I am getting out of security management…

by Michael Farnum on September 5th, 2006 at 11:16 pm
Posted In: Me, Overworked, Patching, Security, Security Management

…is crap like this.  I am honestly tired of having to worry about keeping up with the latest security flaw and making sure my IPS has the latest filters and trying to make sure my network admin is keeping the patches up to date and yada yada yada.  It just gets old. A while back, […] ↓ Read the rest of this entry…

7 Comments
Aug28

Third-party patches – not a good idea

by Michael Farnum on August 28th, 2006 at 9:06 am
Posted In: Defense in Depth, Patching, Security

This story talks about using third-party patches for security flaws instead of waiting for the vendor to put out a patch.  Personally, I am dead-set against it (I posted a while back about it, but I am too lazy to go look for it) for the same reasons the security pros in this article are against it.  […] ↓ Read the rest of this entry…

1 Comment