Toolkit

Story: Patching 'still too difficult'

• 
• 

what an incredulous claim Mary Ann Davidson makes. with all due respect, to make scans for common flaws mandatory makes absolutely no difference to the biggest software flaws we find today. the flaws exploited nowadays are increasingly obscure. little things like the way the address bar processes URLs. i wonder what sort of security scan could detect THAT--something that's really not a flaw, but can be exploited. you need humans to do such things, and face it, the fact is, some problems will remain no matter what you do.
on another point, about moving to Mac OS X, if that was based solely on security, then it's a waste of money. patching windows is not difficult at all. with the recent linux root access flaws, i wonder if OS X is truly that secure (since it is unix-based). or if people just havent begun noticing it yet.

• 
• 

• 
• 
• 

Full Talkback thread