Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Full-disclosure] 6 Month Vista Vuln Report, Debunked

from [Security Admin (NetSec)] Network Security [Permanent Link]
Subject: Re: [Full-disclosure] 6 Month Vista Vuln Report, Debunked
Date: Tue, 26 Jun 2007 08:59:13 -0700 


so far I have seen the same items patched in Vista as for XP SP2 and 2003 
SP1/SP2. If this trend continues the rationale for Vista upgrade will 
disappear. I for one am recommending user's wait until at least Vista SP1 is 
released; however if the same exploits work on all platforms might make more 
sense to wait until 2009-10 for next client OS release. Even Dell is selling XP 
again.  One should count the number of reboots necessary;  only kernel updates 
require a reboot in Linux.

This is not any Microsoft bash, but it is disturbing that despite the TCI so 
many vulnerabilities that are common to current OS releases and previous 
releases have been found--not just in Vista. One would think that TCI would 
result in developers and engineers discovering previously undiscovered bugs. I 
fear that Microsoft still may rely too much on testing as opposed to 
engineering analysis. QA studies with which I am acquainted show that 60 
percent or more of bugs discovered before general availability releases are 
discovered through engineering analysis, not testing.

Edward Ray

-- 
This mail was scanned by BitDefender
For more informations please visit http://www.bitdefender.com


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Full-disclosure] 6 Month Vista Vuln Report, Debunked, Kristian Hermansen
Next by Date:  RE: "run as" local denial-of-service enables administrative account processes to be killed, James C. Slora Jr.
Previous by Thread:  [Full-disclosure] 6 Month Vista Vuln Report, Debunked, Kristian Hermansen
Next by Thread:  [Full-disclosure] 6 Month Vista Vuln Report, Debunked, carl hardwick
Indexes:  [Date] [Thread] [Top] [All Lists]