MS Patch Train Leaves the Station

per1176 writes "Microsoft has released 10 advisories to cover a dozen security vulnerabilities, including a "critical" cumulative update for the Internet Explorer browser. The IE fix corrects a remote code-execution vulnerability that exists due to the way the browser handles PNG (Portable Network Graphics) files."

Forgive my ignorance

[J Barnes]

but is there an obvious point where software become more patch then content?

Lately I envision all Microsoft products as lumbering stay-puff marshmallow men, ambulating labored steps inside a comical suit of band-aids.

M$ still pwnz Linuts

[Anonymous Coward]

Why not just release a patch that uninstalls IE?

New Microsoft Security Update

[PyWiz]

Microsoft has released a free security update to Windows users today: Service Pack Linux. Service Pack Linux includes a fix for all IE vulnerabilities, as well as flaws in Outlook and Office. IIS users will be happy to know that Service Pack Linux will fix many problems with Microsoft's premier web server package as well. Service Pack Linux is considered the most comprehensive security fix in Windows history. Users should get it now at http://distrowatch.org/ [distrowatch.org]

Re:Let the Microsoft Bashing Begin...

[Anonymous Coward]

> I'm man enough to give credit where credit is due

...but apparently not man enough to post this stupid flame under your own account...

The NSA

[Anonymous Coward]

Never needed MSFT to put in a "backdoor" for them, specifically. Christ, they just needed the source-code so they could use all the ones there were already there.

What's a linux?

[J Barnes]

Sorry, I don't use linux and I openly profess my general ignorance.

That obviously makes me a minority around here. Twice over, in fact.

Re:IE PNGs

[Anonymous Coward]

Go out and convince MS to stop packaging it with their os. Make people have to do a little work to get on the internet.

Yeah, that's good thinking! It's hard to believe Steve Ballmer is in charge of Microsoft, and not you!

Security Update for Windows XP (KB666)

[circletimessquare]

A humor security issue has been identified that could allow a Slashbot to remotely compromise your sense of humor about Windows patches and bore you to death. You can help protect your sense of humor by installing this update from Microsoft. After you install this item, slashdot.org will resolve to 127.0.0.1 .

How to Uninstall

Read all comments rated as funny under a story about Windows Update on slashdot.org and your sense of humor will be successfully uninstalled.

Help and support

http://omgmstehsux0rs.slashdot.org/ [slashdot.org]

Re:Forgive my ignorance

[PakProtector]

You know what? Most of us don't mind paying real money for things that have real worth. I payed fifty dollars for Neverwinter Nights when it came out, while my roommate had a 'free' copy the same day.

I will gladly pay money for something I like to make sure that the people who make it will make more. That's how the market economy works. If something has real value, it's only logical to compensate the persons who made it.

Which is entirely why I have never paid for Windows.

All aboard!

[AtariAmarok]

"MS Patch Train Leaves the Station"

Otherwise known as the Bugwarts Express. To find the boarding platform, run your luggage cart full tilt into that blue screen.

Re:Venture to guess?

[Joe Decker]

Check your god damn code

Using an interjection when you mean a adjectival phrase is an amateur mistake. Check your God-damned grammar.

Re:Microsoft... again

[Anonymous Coward]

Also, when you have sex, you DON'T HAVE TO USE CONDOMS. I haven't used condoms of my box for almost a year now. I'm still running high and no aids-virus. Guess what, I have no problems, save for the occasional clash due to girlfriend being a bitch. The difference between my unprotected sex not getting aids/viruses is that I'm not a dumbass and try to have sex with everybody in Bars or whatever it's called. That, and I use a fidel girlfriend, which has NEVER cheated me.

Re:Patches don't solve the problem on new installs

[SomeGuyFromCA]

> 2) Buy a router. £25/$40 buys you a piece of hardware which acts like a firewall and blocks all incoming ports, other than ones you solicit, natch.

and remember to turn off upnp. otherwise, the following happens:

<spiritual descendant of back orifice> hey router, this is a upnp request: forward 31337 to this computer, please!
<router> will do, and you have a good day!
<sdobo> oh, i will...

Re:Venture to guess?

[Knightfall]

Funniest.

Grammar-Nazi Post.

EVER.

Re:To bad

[Spy der Mann]

which was reported to them eight years ago... but no... just a buffer overflow.

I imagine the microsoft engineers wearing anti-infection outfits (with masks and everything) and large instruments.
---
"Ok there's the creature..." (imagine some sort of alien spider, but with more guts and everything)
"Be careful guys, we don't want to break it, just remove the insecure splinter from it"
"Man, this is disgusting. I wouldn't touch that with a 20 foot pole"
"OK, splinter removed! Close the cage, quickly!"

TSHHHHHHHHHHHH

(Guys remove their masks)
"Man, that was the scariest moment in my life! Why do we keep handling code like this?"
"Shut up, the boss' coming right there!"
(Bill Gates approaches)
"Hey guys, what's up! Did you fix that vulnerability?"
"Yes, sir!" (everybody puts up a blatant smile)
'I'm switching to Firefox', thinks one of them.
---

Re:Forgive my ignorance

[mph]

but is there an obvious point where software become more patch then content?

Maybe when you change the name of the software [apache.org] to indicate that's the case?

Re:Forgive my ignorance

[vettemph]

>I payed fifty dollars for Neverwinter Nights when it came out, while my roommate had a 'free' copy the same day.

So is it his turn to pay next time? :)

Re:Sure glad I don't have to do this crap

[Anonymous Coward]

Whoever modded this transparent tripe up should be ashamed of themselves.

Obviously not using IE though, it doesn't support transparent tripe.

Re:Reminds me of the JPG buffer overflow

[SeaFox]

After the jpg incident, wouldn't you tend to look at the code handling other image formats for similar problems?

Nah, that sounds like some sort of proactive security initative.