Re: [Full-disclosure] Fwd: n3td3v has a fan

[G D Fuego <gdfuego@xxxxxxxxx>]

On Apr 9, 2008, at 2:53 PM, n3td3v <xploitable@xxxxxxxxx> wrote:

> On Wed, Apr 9, 2008 at 7:13 PM, Ureleet <ureleet@xxxxxxxxx> wrote:
>> where do you come into the equation?
>
> It highlights what i've been saying for _years_ about never trusting
> your employees, and you've got to patch your offline machines as fast
> as your online ones.
>

Patching your offline systems is important, but I wouldn't recommed  
doing it just as fast as your offline ones.

If you have a choice between patching all systems within a month of  
patching online systems within a week, definitely patch the online  
ones faster.

Much like triage in a medical emergency, you should assess your  
patching based on risk.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/