by sjvn
Security

Patch and Patch Again

Microsoft is always patching Windows. What some people don't know is that they often don't get it right the second time either.

12 comments | 21I like it!
November 3, 2009, 03:20 PM — 

Why do I prefer Linux to Windows? I could count the ways, but here's a big one. When mistakes are made in Linux, they tend to get fixed and that's the end of it. With Windows, it often doesn't work that way.

Take, for example, Microsoft recent release of its biggest set of security patches ever. This uber-patch set fixed 34-different bugs.

Or, well, to be more exact, it tried to fix 34-different security holes. It turns out that it didn't fix some problems and it caused some new ones. My particular favorite had been the one that completely disabled Communications Server. That 'fix' nailed every version of Communications Server from Live Communication Server 2005 on up to Office Communications Server 2007 R2.

What kind of quality assurance allows a company to put out a patch that doesn't just get something wrong, it actually stops a major office server program dead in its tracks? The word 'awful' is what comes to my mind.

It wasn't just the server programs that got fouled up. Internet Explorer got hosed as well. One mistake scrambled Web page elements, while another causes a "Type Mismatch" script error on sites that use VBScript or a mix of VBScript and JavaScript. This particular foul-up nails every version of Internet Explorer from 5.01 to Windows 7's IE 8. Remember, I did tell you that Windows 7 didn't actually improve Windows' security.

Oh, and, this just in, Microsoft recently issued a fix to a Microsoft Office patch from August that could let someone take over your computer . My goodness, it's no wonder that some companies have staffers that do nothing but try to keep on top of Microsoft's patches, and re-patches, and re-re- well you get the idea.

As for me, I'd rather spend my time working with my Linux programs rather working on my Windows programs. At least with Linux when something is fixed, chances are, it's really fixed.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

I like it!
Comments

actually I've found linux to

actually I've found linux to be even worst about patches and updates then windows. I've never had to rewrite my xorg.conf from a command prompt in windows after an update I didn't even know happened. Nine times out of ten, a system upgrade will break my display, my sound, my internet (try reinstalling wpa files when you can't connect to your wpa wifi), or a combination of all of the above. Windows upgrades may break some programs, linux upgrades have the bad habit of turning my computer into a nice paperweight. In linux's defence, I do use some pretty complicated hardware setups, but I don't have the problems with comparable windows ones.
| reply

Updates or upgrades

Anonymous, you appear to be talking about upgrades when the article is about updates. They are two very different things.
| reply

Are you from Microsoft?

Are you from Microsoft?
| reply
peer-to-peer

Brian Proffitt
Microsoft/Novell: Breaking Down the Coupon Numbers

Esther Schindler
Drupal's Dries Buytaert on Building the Next Drupal

Tom Henderson
Top Ten General Operating Systems Rants

pasmith
PS3 motion controller delayed; goes up against Project Natal

sjvn
Neolithic Windows security hole alive and well in Windows 7

claird
Perl source code comparison makes for good reading

mikelgan
Cell phones don't create stress or interrupt much

Sandra Henry-Stocker
How to: The Unix Interview

 

Where Google Chrome security fails: the password
I heard mention that the Chrome OS will have some sort of encryption available a la bitlocker. If it's possible to encrypt personal data using another password or key, then it may have potential for very secure data.... And Ubuntu has an 'encrypt home directory' option, perhaps google should follow suit.
- Dann

Join the conversation here

The Daily Tip

The Daily TipQuick, practical advice for IT pros. Made fresh daily.

Hot tips:

Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.

Newsletters

Subscribe to ITWORLD TODAY and receive the latest IT news and analysis.

I would like to receive offers via email from ITworld partners.
By clicking submit you agree to the terms and conditions outlined in ITworld's privacy policy.
Marketplace