There are some doubts on that "hot patching feature". We are all a bit paranoid ones so it is just a thought. This perfect new possibility may allow a bud guy with admin rights to "patch" your box with a brand new rootkit in just a few minutes without ever having to reboot.
Generally, executable code protection is a good idea for security. As far as I know it's even recommended to disable kernel modules in *ix systems.
And I'll wait a couple of weeks or so to see what people say about sp1. Reasons may be found at http://www.thechannelinsider.com/article2/0,1759,1780842,00.
asp

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/312/31304#31304