2 ms·
They don't have obligation to ship bleeding edge off-the-shelf code but they do have an obligation to provide the operating system with security patches. If the
by alpb 5y ago
They don't have obligation to ship bleeding edge off-the-shelf code but they do have an obligation to provide the operating system with security patches. If the user clicks on a tar file to extract it and it ends up writing to random places on their filesystem due to a vulnerability, that is gonna be a problem for the enterprise users.
- thrower123 5y agoFortunately Windows won't extract tar files out of the box.
- tinus_hn 5y agoHaha as if that doesn’t happen all the time. Enterprise says ‘well nothing is truly secure’ and just installs the update after a month.