More - Steve Manzuik Quotes

It would be really nice to see Microsoft turn around a patch in between 60 and 90 days. Considering the size of the company and the way some of these Internet-facing software [apps] are complicated, the 90-day window isn't that bad. But when it creeps up to three and four months, it becomes unacceptable,

Steve Manzuik

 

This month, Microsoft is only issuing one patch and we already know it's not one of ours. That means that our overdue list will keep getting longer and longer,

Steve Manzuik

 

It is the skeleton in Microsoft's closet. We routinely find them.

Steve Manzuik

 

This flaw is not as critical as some because it can only be exploited on the local network and even if it is compromised, the error would only be able to crash the server, not expose the data or put information at risk. Basically, someone on the local network could crash the machine running the software. It doesn't allow for any kind of actual access to the machine or to the data.

Steve Manzuik

 

Users can protect themselves by not clicking on any links in e-mails from unrecognized sources and by generally paying attention to what Web sites they are visiting. Locking down a system and not using the administrator account at all times lowers the risk but does not mitigate the vulnerability.

Steve Manzuik

 

We've assigned it our 'High' rating, which means the vulnerability allows for code execution,

Steve Manzuik

 Execution

We've assigned it our

Steve Manzuik

 

[In the wrong hands] this tool is dangerous, ... But that version isn't as dangerous as other versions that will be released.

Steve Manzuik

 

I think September will be quiet. When we get the six, seven, eight or nine patches, it gets to be a bit more difficult.

Steve Manzuik

 

Overall, they have improved, there's no doubt about that. But unless they move faster on some of these high-impact vulnerabilities, we'll always deal with rogue researchers finding the same things,

Steve Manzuik

 Doubt