4 ms·
At some level, agreed that it probably helped security wise for researchers. That the fix was committed in public and then vulnerability remained for a month an
by craigkerstiens 5y ago
At some level, agreed that it probably helped security wise for researchers. That the fix was committed in public and then vulnerability remained for a month and well still currently for customers is where one could make a case that the open source nature did as much damage as good.
- formerly_proven 5y agoWhen you distribute patches for a vulnerability it basically makes no difference whether the source for those patches is available - people are quickly going to figure out what the vuln is. This is a patch rollout problem and nothing else.
- zoobab 5y ago$ apt update Oh, wait, fix not available in the Debian/Ubuntu official repos, only M$ trusted ones.
- hannob 5y ago> That the fix was committed in public and then vulnerability remained for a month That's an indication that Microsoft is bad at handling security issues. Which isn't news and has very little to do with open source. Something very similar happened with Exchange, it led to plenty of people being compromised, and Exchange is not open source.