Steve Manzuik Quotations

I don't buy the argument that they are aiding attackers. The attackers are already reverse-engineering the patches. They have the time and resources to find out where the flaw lies. The guy that feels the pain is the system administrator who is in the dark and who can't do his own reverse-engineering.

As far as we know, this update does not address our issues.

It's safe to assume that once we find a flaw, someone else will probably find it. The problem here is that someone malicious might find it and exploit it before Microsoft can provide full protection.

The potential is there. We haven't seen any exploitation, but it doesn't mean it can't be done.

There are some extremely smart hackers out there using and sharing the tools that find these vulnerabilities. When Microsoft takes a long time to issue fixes, it sets up a dangerous situation,

This patch is not meant to replace the forthcoming Microsoft patch, rather it is intended as a temporary protection against this flaw.

This month, Microsoft is only issuing one patch and we already know it's not one of ours. That means that our overdue list will keep getting longer and longer,

We've assigned it our 'High' rating, which means the vulnerability allows for code execution,

Overall, they have improved, there's no doubt about that. But unless they move faster on some of these high-impact vulnerabilities, we'll always deal with rogue researchers finding the same things,

Microsoft's customers depend on that information to figure out how to respond to Patch Tuesday. The reality is, system administrators will delay deploying a patch based on the details of the bulletin. When details aren't included, he won't install that patch. That is a big problem.