Patches pose significant risk, researchers say

Patches pose significant risk, researchers say
Robert Lemos, SecurityFocus 2008-04-23

A group of four computer scientists urged Microsoft to redesign the way it distributes patches, after they created a technique that automatically produces attack code by comparing the vulnerable and repaired versions of a program.

Re: Huh 2008-04-25
Robert Lemos

First, I will admit the wording is a bit strange, so it will be fixed.

However, there are three cases:

1) the flaw is exploited before the patch is released,

2) the flaw is exploited after the patch is released, and

3) the flaw is not exploited at all.

The original statement is just saying...

[ more ]