RE: MS MSRT

["Randy Abrams" <abrams () eset com>]

> -----Original Message-----
> From: Todd Towles [mailto:toddtowles () brookshires com] 
> Sent: Friday, February 03, 2006 7:09 AM
> To: Drsolly
> Cc: Gadi Evron; Randy Abrams; funsec () linuxbox org
> Subject: RE: [funsec] MS MSRT
>
> DrSolly wrote: 
> > Should they have released it if the infection rate was just a few 
> > thousand?
>
> If it was ready to be released, why not? The MSRT is really 
> geard toward the clueless public, IMHO. They don't know if it 
> is release yesterday, today or on Black Tuesday. But they do 
> know if they data is gone. As you said, most corporates don't 
> use auto updates and therefore any non-patch release 
> shouldn't make much of a wave at all.

It wasn't ready to be released. You would not believe the test matrix
required for releasing a MSRT update.

I don't know how ling they had to test the Zotob routine before adding it to
the MSRT, but I'll bet you it was quite a while longer and the threat far
more significant.

Cheers,

Randy  

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.