Security
Tuesday, July 16, 2002Never Underestimate the Power of Human Stupidity
At the moment I'm not sure the authors of Windows Update are competent enough to expose their work.MS02-018 is the IIS cumulative patch. It supersedes all previous patches for IIS. MS02-012 patches a problem in the SMTP service, an option bundled with IIS. Windows Update wants to apply the patch for MS02-012, even though MS02-018 was already applied.
And the funny part? The SMTP service is not installed.
6:12:40 PM # Google It!
categories: Dear Microsoft, Security, System Administration
Windows Update (post 2 of 2)
The new version of Windows Update adds some significant features. Most obvious among them, and the one that will cause the most panic among the paranoid, is the backport of Automatic Updates to Windows 2000. Automatic Updates checks in with the mothership on a scheduled basis to see if there's anything New & Improved! that needs to be installed.But that's only one component. The Windows Update service has been packaged for distribution, as Software Update Services, so you can update systems from a locally-approved cache. The question that I have is whether this version checks installed files as well as the Registry before confirming that all is swell.
It's all about patch management.
3:08:03 PM # Google It!
categories: Industry, Security, System Administration
