Re: New M$ vulnerability patch for Windows

Here is a good example.  the Windows Messenger Service.    People can
interface it over the internet and display pop ups on your computer.  It
isn't a "bug" so there is no patch to prevent it.  You actually need to
either uninstall windows messenger or have a firewall to block the ports.

Windows patches only fix security problems they know about.  Can't patch the
ones that MS hasn't discovered.  And if you are a bad guy and find out how
to break into MS computers, are you going to call Bill Gates and tell him so
they can fix it?

----- Original Message ----- 
From: "Steve Richter" <srichter@xxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, September 11, 2003 8:11 AM
Subject: RE: New M$ vulnerability patch for Windows


> I use windows automatic update, which for reasons I cant explain is not
> always automatic.  So every week I visit the windows update site and
> download all the w2k updates. So far I have not been burned by any faulty
> updates.
>
> I have a theory that if you religously apply the updates and dont open
> attachments, then you cant be hacked and dont need a firewall. I hope
> someone else can prove if that is wrong or not.
>
> -Steve