No *wonder* MS stuff gets hacked!

[kengr]

I was getting ready to run some security checks on my main system (I had to reboot it because of an annoying Firefox bug anyway)

I'd already run Spybot and Ad-aware on the other two systems the other day.

Spybot updated just fine Adaware came up with this weird error message.

After much digging, I determined (via a lot of googling) that it needed the Visual C redistributable library. So I download it from MS, and install it. And then re-install AdAware. (That's another story, it shouldn't have just errored out like that And It took a lot of reboots and install/uninstall cycles before things worked).

So, a bit ago I check to see how the Spybot run was going. And noted the Windows update icon down on the quicklaunch bar.

I click on it and it a security fix. For the Visual C redistributable library I'd downloaded direct from MS not 4 hours ago!!!

Good grief. What kind of idiots don't have the *patched* version of files up for download???

ETA: And now that the patch has been downloaded, it is taking *forever* to apply. It's been half an hour so far...

Comments

[maxstories.livejournal.com]

Slashdot had a post about a web server botnet - leveraging Apache and coordinating with PC botnets. It's not just Microsoft that has problems. It's the entire artificial ecology of the system.

In organisms this sort of immune system failing would cause death and more successful immune systems would propagate outwards.

[seawasp]

Unless the organisms had a stranglehold on the ecology in some other way, and bred fast enough that immune system failings were not a problem.

[kengr]

You totally misunderstood my point.

MS had a version of the file for download THAT NEEDED A SECURITY FIX APPLIED!

If they've had time to update the code that does the "does this part of Windows need an update" check, then they've had time to replace the file on their servers with a fixed one. In fact, they should have done that *first*.