Johannes Ullrich Patch Quotations

More often than not, a patch will actually do more damage than good if you roll it out too quickly without testing it first.

We carefully checked this patch and are 100 percent sure that it is not malicious. The patch is, of course, not as carefully tested as an official patch. But we feel it is worth the risk. We know it blocks all exploit attempts we are aware of.

We do suspect that Microsoft will still release an early patch given the imminent danger to its customers from this flaw. As stated by the company about two years ago, patches can be released within two days if needed. Based on prior public commitments, we do suspect that Microsoft will issue the patch early once they are convinced that customers require the use of Internet Explorer in production environments.

For home users: Apply the patch as soon as you can.

Each patch (official or not) has a chance to 'blow up' and cause unintended side effects.