4 ms·
If you or your IT dept is not installing updates, especially security patches, over 2 months after they come out, somethings horribly wrong.
by rjbwork 9y ago
If you or your IT dept is not installing updates, especially security patches, over 2 months after they come out, somethings horribly wrong.
- unpatchedyay 9y agoPosting from a throwaway for obvious reasons, but the place where I work still hasn't applied these patches after I warned their IT dept about the NSA vulns a month ago... luckily I'm at least able to apply the patch to my own system manually. If it hits us I'm pretty sure we're screwed on the order of a few thousand systems.
- dorian-graph 9y agoThe reality is, this is very common.
- rjbwork 9y agoThen what, realistically, can be done when nation-state knowledge of vulnerable systems is hoarded for cyber-warfare purposes?
- criley2 9y agoFrankly, there is only one solution I can see anymore: Laws must be passed to: * Force the US government to report vulnerabilities to vendors * Create a regulatory body to monitor the use of vulnerabilities in clandestine operations and ensure that mandatory reporting is upheld I cannot see anything less working. Get that through US and EU governments, and you'll likely have the vast majority of vulnerabilities being reported and patched. Of course this is akin to asking the US and Russia to convert their nuclear stockpile into reactor fuel.