Re: [SC-L] Computerworld op/ed on vulnerability patch cycle

2004-04-14 Thread Kenneth R. van Wyk
Alexander Antonov wrote: I believe the issue of automatic updates was already discussed on other security-related lists. Yes, I agree, but that's not what I was commenting on specifically. Certainly, we've seen automatic patches for a few years now. (And for many systems, e.g., desktop users, I

RE: [SC-L] Computerworld op/ed on vulnerability patch cycle

2004-04-14 Thread Alexander Antonov
Ken, I believe the issue of automatic updates was already discussed on other security-related lists. There are two main problems: - everybody who has subscribed is at a complete mercy of the software manufacturer, if a new bug is introduced in a new release, then everybody becomes vulnerable be

[SC-L] New Security Flaw DataBase is Up

2004-04-14 Thread Greenarrow 1
Even though this is free base it also has a lot of topics and flaws in the Windows systems. This is now on line for all to take a ganer at: http://www.osvdb.org/ Regards, George Greenarrow1 InNetInvestigations-Forensics

[SC-L] Webcast on Developing Secure Code

2004-04-14 Thread Greenarrow 1
You might find this interesting for secured coding of softwears: Apr15 at 12 noon EDT, registration is required. http://searchsecurity.techtarget.com/featuredTopic/0,290042,sid14_gci958905,00.html?track=NL-102&ad=480185 Regards, George Greenarrow1 InNetInvestigations-Forensics

[SC-L] Webcast and article

2004-04-14 Thread Gary McGraw
Hi gang, The April 2004 issue of Information Security Magazine contains an article I wrote on the future of software. It is adapted (pretty heavily) from Exploiting Software and identifies seven trends that will help you understand how software is evolving and how this evolution will impact se