New Windows Patch Proves Tricky

[RedEarth]

The emergence of a new Internet virus targeting a Microsoft Windows security flaw could cause more damage than usual because the company's system for fixing the problem is so complex that many people will not bother to download it, security experts warned.



On Sept. 14, Microsoft released a patch to remedy a problem in the way the company's products process digital image files. That problem could allow attackers to take control of computers running the Windows XP (news - web sites) operating system, Server 2003 software and Microsoft Office just by getting people to open an e-mail message or visit a Web site. Microsoft Office is a bundle of products that includes the popular Word, Excel and Outlook e-mail programs.


Microsoft has waged an extensive public relations campaign to convince users to set up their computers to receive software patches through the company's automatic update service, but some experts said that many users do not know that they might need to manually apply other patches at a separate Microsoft Office Update Web site to ensure that their PCs are protected against the threat.


Windows users who receive automatic updates or go to Microsoft's Windows Update site can use a scanning tool that tells them whether they need to visit its Office Update site for other fixes. But patching Office often requires users to take additional steps. For example, users who have not installed any previous Office patches will need to download and install those fixes before their computers will accept the latest patch. The Office site also may require users to have their original Microsoft Office CD-ROM handy.

http://story.news.yahoo.com/news?tmpl=story&e=5&u=/washpost/20041001/tc_washpost/a64737_2004oct1

[Radius]

1. Scripted

Most corporate users script patches or package them and point it to an office (or OSversion) install stored on a server.

Could be a nuisance for a home user.

[TrogL]

2. Yeah we've got one guy workin' just about fulltime doing this

We're not touchin XP with a ten-foot pole.

[Radius]

3. W2ksp4 what we use.

Stable with patch management. I like thin clients, 90% of people don't need a desktop for their job where I am. Cheap and easy.

I'm dealing with more unix stuff and backups these days..

Edit: insert %

[realcountrymusic]

4. What's the cost of bad design? (Get a Mac.)

People say Macs cost more. TCO-wise, that's simply not true. I manage a lab full of machines. To update all of our XP boxes every time there's a new SP takes me (or my highly paid staff) hours.

And here's one for the books: my Powerbook died on Friday. Totally dead (actually the first time that's happened to me in approximately 30 Macs I have personally owned, and several dozen I've had in my labs!). On Monday I called Apple and got an English-speaking tech who actually knew something, and who understood that I knew enough to have done all the basic things (resetting the power manager, zapping the PRAM, reseating the RAM and wireless card, etc.)

I was still under warranty -- three months to go. Apple sent me a return kit by overnight, got here Tuesday morning. Took me until Wednesday to send it out to Apple in Tennessee. I got email updates at every stage of the process -- unit arrived, problem diagnosed, repair made, unit shipped. It was back to me on Friday morning. That's a 2 day turnaround, folks, and I didn't have to leave my office. Turns out it needed an entirely new G4 processor, which is a $500+ repair job. Works like a charm, data intact, and they even cleaned the machine, which was filthy.

So it cost about $200 more than I might have paid for roughly equivalent power in a bargain PC. This experience alone was worth every penny of the difference. Not to mention that it's worth that much to me every time I boot up this elegant machine and do serious A/V work on it flawlessly.

RCM

PS -- I sold all my stock in Apple last Spring. This is pure love speaking.

[Northwind]

5. I always laugh at the "Macs are expensive" BS

Used to work at a small magazine production firm. 200 employees. 50 of those were the actual production and graphics people, all using Macs. The rest were sales, IT, and other useless types on Winboxes. The IT staff was about 50 people. They worked 70 hours plus a week keeping those Windows machines working properly. There was only one IT guy for all the Macs. He never worked more than 40 hours a week, and he never had anything to do with the 40 hours he was there. Sounds like the Winboxes were a hell of a lot more expensive.

[RUMMYisFROSTED]

6. Always wait 90* days before touching a Window's patch.

*minimum