NO! The best solution is NOT to apply a service pack to fix security bugs. Rather, it is to supply security patches separately from service packs. We should be able to patch the security holes with no strings attached. It is not acceptable for me to be forced to install non-security-related, unrequested, unwanted feature changes (and agree to new licensing conditions) in order to fix security defects in a product I have already paid for.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/112/16655#16655