On Fri, Feb 28, 2003 at 12:38:16PM -0600, Steve Bremer wrote:
>       However, for a security critical hosts (and maybe others), I 
> would recommend against having your machine automatically apply 
> updates.

Research we've conducted would confirm this; see our refereed USENIX
paper on the subject:

http://wirex.com/~crispin/time-to-patch-usenix-lisa02.ps.gz
-or-
http://www.nxnw.org/~steve/papers/lisa2002-time-to-patch.ps
pdf also available at:
http://www.nxnw.org/~steve/papers/lisa2002-time-to-patch.pdf

Cheers :)

-- 
"In God we trust, all others we monitor."
 -- NSA, Intercept Operators's motto, 1970

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to