Interesting comparing cars to MS products. If you think about it, cars have to be patched all the time too. Oil changes every 3000 miles, regular maintenance, gasoline to keep it running, mechanical failures, etc. The fact is, people still buy them so they don't have to walk.

Should MS write better code? You bet. Should MS make it easier to install patches? Absolutely. Do they HAVE to? Nope, since people will still buy the product to run their business despite the expected maintenance.

To say the risk of being exploited is worth the savings of not patching systems is all well and good until your company is held liable for causing damage to other companies. Because the patch was available and you didn't apply it, you would be negligent. Not patching systems could be a career limiting move.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/185/22368#22368