sst8

4 ms·

1. 1.▲
   by sst8 10y ago

   Well, with micropatching you don't need to reboot and you only have to review minimum code changes - and if the patch is not working for you you can unpatch it (with proper permissions, ofcourse).
2. 2.▲
   by sst8 10y ago

   What about getting vendors into changing their patching habbits? Instead of packing some hundred mega patches just provide micro ones when needed? As you said 0day issues are usually (not allways) easy to fix. Probably you alone are skilled
3. 3.▲
   by sst8 10y ago

   Live patching is gaining the momentum - see Ksplice, Kpatch, kGraft, XEN and similar