Patch and Patch Again

Microsoft is always patching Windows. What some people don't know is that they often don't get it right the second time either.

By sjvn  12 comments

Why do I prefer Linux to Windows? I could count the ways, but here's a big one. When mistakes are made in Linux, they tend to get fixed and that's the end of it. With Windows, it often doesn't work that way.

Take, for example, Microsoft recent release of its biggest set of security patches ever. This uber-patch set fixed 34-different bugs.

Or, well, to be more exact, it tried to fix 34-different security holes. It turns out that it didn't fix some problems and it caused some new ones. My particular favorite had been the one that completely disabled Communications Server. That 'fix' nailed every version of Communications Server from Live Communication Server 2005 on up to Office Communications Server 2007 R2.

What kind of quality assurance allows a company to put out a patch that doesn't just get something wrong, it actually stops a major office server program dead in its tracks? The word 'awful' is what comes to my mind.

It wasn't just the server programs that got fouled up. Internet Explorer got hosed as well. One mistake scrambled Web page elements, while another causes a "Type Mismatch" script error on sites that use VBScript or a mix of VBScript and JavaScript. This particular foul-up nails every version of Internet Explorer from 5.01 to Windows 7's IE 8. Remember, I did tell you that Windows 7 didn't actually improve Windows' security.

Oh, and, this just in, Microsoft recently issued a fix to a Microsoft Office patch from August that could let someone take over your computer . My goodness, it's no wonder that some companies have staffers that do nothing but try to keep on top of Microsoft's patches, and re-patches, and re-re- well you get the idea.

As for me, I'd rather spend my time working with my Linux programs rather working on my Windows programs. At least with Linux when something is fixed, chances are, it's really fixed.

12 comments

    Anonymous 2 years ago
    Windows and Linux have a fair amount of patches, but let's keep this in mind. Windows patches are mainly for the operating system, and MS Office. Linux patches are for every piece of software in the Linux distribution, which is a huge list of software. So, it is difficult to scale just operating system patches from Windows to Linux. If you were able to narrow down patches just for the operating systems, you would soon realize that the number of patches released by Microsoft for Windows greatly outnumbers those for Linux.Personally, I too use Linux solely. Why? Because it is more secure to start with than Windows. Microsoft will make whatever claims they can, to sell their product. But the fact of the matter is Windows is still riddled with security holes all of the time. The U.S. Department of Defense just released articles (you can search Google on this), recommending the use of Linux everywhere because it is open source and proven to be more secure than Windows.http://members.apex-internet.com/sa/windowslinux
    Anonymous 2 years ago
    Anonymous, you appear to be talking about upgrades when the article is about updates. They are two very different things.
    Anonymous 2 years ago in reply to Anonymous
    No, he used the wrong word. He did in fact mean "updates" and those can and do sometimes break things in Linux. Linux has quite a lot of problems, but trolls like Stephen will never provide you with an objective view of any OS.
    Anonymous 2 years ago
    Wow, I can't imagine what you are doing - are you running experimental kernels, rolling your own distributions or choosing obscure, poorly documented and poorly supported distributions?I have installed hundreds of Linux servers and dozens of Linux workstations. I have never had the kinds of mass and continuous, ongoing problems you have described. I do tend to stick to main stream distributions though. I suggest you run Ubuntu for your Desktop. It is stable, reliable and has provided me on several personal workstations plus a number of friends workstations (even extremely un computer savy user) with reliable platform.The patches just work. I don't hesitate to install them anymore - not even on servers. With Windows, on a server especially, unless I absolutely have to have it and it solves an identifiable issue I am experiencing, I don't patch. It is just far to dangerous.
    Anonymous 2 years ago in reply to Anonymous
    if he has a particularly unfortunate choice of laptop, with a poorly-supported propriety/closed-source wi-fi chip under ndis, a graphics card dependent on a proprietary driver (or that particular, embedded graphics chip that's had an oddly poor and weirdly inconsistent driver from intel), and a distro that doesn't mesh well with his hardware. Remember, with some distros, dependence on a proprietary graphics driver will require redoing the graphics driver installation with any kernel update. One of Ubuntu's "innovations" was to automate this.Call it a "perfect storm". I can see a newbie with just one system having these problems -- especially if he get's some bad advice on dealing with the problems. Upgrades shouldn't be so problematic -- but it's certainly an atypical case (and I've heard and seen *plenty* of equivilent Windows
    Anonymous 2 years ago
    actually I've found linux to be even worst about patches and updates then windows. I've never had to rewrite my xorg.conf from a command prompt in windows after an update I didn't even know happened. Nine times out of ten, a system upgrade will break my display, my sound, my internet (try reinstalling wpa files when you can't connect to your wpa wifi), or a combination of all of the above. Windows upgrades may break some programs, linux upgrades have the bad habit of turning my computer into a nice paperweight. In linux's defence, I do use some pretty complicated hardware setups, but I don't have the problems with comparable windows ones.
    Anonymous 2 years ago in reply to Anonymous
    #1.. windows don't have xorg.. At least you have the option to edit xorg.conf instead of the BSOD cycle..2. You should try to switch distro's if your having problems like that..Used Linux for 10+ years and only have minor problems with upgrades... Usually caused by a asm compiler not updated.. Other than that never had issues even with backward compat.. The same programs i used from the 2.0 kernel and libs still run in the current 2.6 (except for ippl which was just a recompile)...
    Anonymous 2 years ago in reply to Anonymous
    Nothings perfect of course; but your answer, is to simply buy a PC and with "Linux" already installed upon it. Most people though, are shocked; at the zero driver work needed, with a Kubuntu Install CD, for one example.
    Anonymous 2 years ago in reply to Anonymous
    Eh, do you use Linux or not? If yes, why? If not, what ARE you talking about?
    Anonymous 2 years ago in reply to Anonymous
    Are you from Microsoft?

      Add a comment

      Post a comment using one of these accounts
      Or join now
      At least 6 characters

      Note: Comment will appear soon after you have activated your account.
      Obscene/spam comments will be removed and accounts suspended.
      The information you submit is subject to our Privacy Policy and Terms of Service.

      ITworld LIVE

      SecurityWhite Papers & Webcasts

      White Paper

      Overcome Top 7 Admin Challenges of Active Directory

      As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

      White Paper

      Insiders Can Ruin Your Company. Take Action.

      Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

      White Paper

      Top Solutions and Tools to Prevent Devastating Malware

      Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

      White Paper

      Streamline Compliance and Increase ROI

      Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

      White Paper

      X-Ray of the PCI Process-4 Proactive Steps

      This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

      See more White Papers | Webcasts

      Ask a question

      Ask a Question