, 2002-04-15
Don't blame Microsoft. They gave you the patch; it's your responsibility to use it.
Expand all |
Post comment
The Buck Stops Where?
2002-04-15
Nighthawk (3 replies)
Nighthawk (3 replies)
The Buck Stops Where?
2002-04-15
MG (1 replies)
MG (1 replies)
The Buck Stops Where?
2002-04-16
Anonymous (1 replies)
Anonymous (1 replies)
First, who insisted that the company use IIS? Then, who refused to allow a switch to a more secure web server after Code RGB, Nimda, and every critical-hole-of-the-week since?
Who makes IT "damned if they do and damned if they don't" - don't install the patch and get screamed at when the hole is exploited, or install the patch and get screamed at when it breaks something.
Who insisted on using web technology that uses ASP (which only runs on IIS), instead of Java, CGI, or PHP (which runs on several web server platforms)?
The answer to all of these is upper management. They can't and don't want to understand the technical and security ramifications of their decisions, they believe whatever vendors shove down their throats, they don't listen to their IT guys, and then they blame IT when problems arise.
Maybe if CTOs like you and your friend would pull your heads out of your posteriors and let your IT guys make the tactical IT decisions (like what web server platform to use) instead of micromanaging them, you wouldn't have these problems.
By the way, I found a nice little tool that converts ASP to PHP. Now the only logical reason to keep IIS (ASP) is gone.
But being the MS apologist you are, you will not doubt come up with some sort of FUD to convince those stupid enough to take you seriously to stick with IIS.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/74/11985#11985