Mr Mullins; you say that the owner of the system is responsible for patching the O/S etc to prevent infection and other malware. I say it is up to the software developers (& I r 1) to ensure that there are a lot less reasons system owners NEED to patch the software in the first place. Why should I spend several hours per week downloading and then installing patches for EACH of my systems - I have better things to do with my time (like sleep) - especially when some patches either undo previous patches or just simply DON'T WORK!!! You want to supply computing "to the masses" in a way that is "easy to use" - then supply it so that it is SECURE in the first place.

BTW I blame the rush to market for many of these vulnerabilities. As a developer myself I am constantly pressured to develop "better, faster, cheaper" product even though it may be "swiss cheese" that I am unleashing upon the unsuspecting public.

If you want to point the finger at someone then point it at the marketing/product/sales/development people who create the environment where systems need patching, and leave the poor system owner alone.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/134/17641#17641