4 ms·
The real lesson is that the patch treadmill doesn't work, and it hasn't for years. I haven't yet heard of any major fallout from this DNS vulnerability, so it
by soundsop 18y ago
The real lesson is that the patch treadmill doesn't work, and it hasn't for years.
I haven't yet heard of any major fallout from this DNS vulnerability, so it may be going too far to say that patching doesn't work. Maybe other methods work better, but I don't know if the current method is as broken as Schneier says.
- cconstantine 18y agoPatching has some serious flaws. The main problem is that the vast majority of people don't apply their patches, even when applications auto-check for updates. When a patch is released, that patch directs the bad guys to exactly where the security flaw is.