This is a prime example of Microsoft getting the shaft regardless of what they do. Mistakes do happen from time to time. Considering patch quality has been very high for quite a while now, they were overdue for a mistake (law of averages). My second point, there is no excuse not to patch! Deployment in your environment may vary. But after some amount of testing, deploy patches. Better to deal with a few issues when they arise from a patch than having to deal with a wide spread network issue if an exploit gets inside your perimeter defenses! Patching is a neccessary evil. It is not going to go away. The positive aspect here is Microsoft is communicating what's happening (and reviewing why it happened to prevent it in the future), even if it was prematurely forced to do so by Eeye.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11408/34014#34014