RE: [Full-Disclosure] Re: Microsoft Security, baby steps ?

[Nick FitzGerald <nick@xxxxxxxxxxxxxxxxxxx>]

John.Airey@xxxxxxxxxxx wrote:

<<big snip>>
> Come on Microsoft. How about putting together a single file that contains
> all the "critical" security updates since the last service pack for a given
> OS? Then us beleaguered admins can stick it on a CD together with the
> relevant service packs and we'd no longer need to use the NIC until a
> machine is fully patched.  ...

Ummmm -- can't you already do this yourself with the "catalog" feature 
of Windows Update??

Doesn't help really small shops and home users, of course, but they are 
(presumably) the intended target market for the security update CD.

> ...  Who knows, perhaps then we'd get sensible results
> out of MBSA?

8-)


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html