|
|
User Controls
|
New User
|
Login
|
Edit/View My Profile
|
|
|
|
ActiveMac
|
Articles
|
Forums
|
Links
|
News
|
News Search
|
Reviews
|
|
|
|
News Centers
|
Windows/Microsoft
|
DVD
|
ActiveHardware
|
Xbox
|
MaINTosh
|
News Search
|
|
|
|
ANet Chats
|
The Lobby
|
Special Events Room
|
Developer's Lounge
|
XBox Chat
|
|
|
|
FAQ's
|
Windows 98/98 SE
|
Windows 2000
|
Windows Me
|
Windows "Whistler" XP
|
Windows CE
|
Internet Explorer 6
|
Internet Explorer 5
|
Xbox
|
DirectX
|
DVD's
|
|
|
|
TopTechTips
|
Registry Tips
|
Windows 95/98
|
Windows 2000
|
Internet Explorer 4
|
Internet Explorer 5
|
Windows NT Tips
|
Program Tips
|
Easter Eggs
|
Hardware
|
DVD
|
|
|
|
Latest Reviews
|
Applications
|
Microsoft Windows XP Professional
|
Norton SystemWorks 2002
|
|
Hardware
|
Intel Personal Audio Player
3000
|
Microsoft Wireless IntelliMouse
Explorer
|
|
|
|
Site News/Info
|
About This Site
|
Affiliates
|
ANet Forums
|
Contact Us
|
Default Home Page
|
Link To Us
|
Links
|
Member Pages
|
Site Search
|
Awards
|
|
|
|
Credits
©1997/2004, Active Network. All
Rights Reserved.
Layout & Design by
Designer Dream. Content
written by the Active Network team. Please click
here for full terms of
use and restrictions or read our
Privacy Statement.
|
|
|
|
|
|
|
|
Time:
09:24 EST/14:24 GMT | News Source:
InformationWeek |
Posted By: Chris Hedlund |
Some observers wonder if Microsoft's patch of Adobe Flash Player augers the company's permanent move to be more accountable for the security of bundled, partnered products in Windows.
Microsoft confirmed Wednesday that it will continue to patch third-party products that impact Windows.
Tuesday, Microsoft pushed out a patch to Windows XP, 98, and Millennium users for Flash Player, an Adobe-owned multimedia application that's bundled with those operating systems. It was the first time that the Redmond, Wash. developer had issued an update for a non-Microsoft product using its Windows Update service.
A Microsoft spokesman explained the decision Tuesday afternoon by saying that "Flash Player is a third-party technology that is redistributed by Microsoft in certain versions of Windows, therefore some Microsoft customers may be at risk.
|
|
#1 By
17996 (131.107.0.77)
at
5/12/2006 12:48:48 PM
|
This may be the first time third party patches have been distributed *through Windows Update*, but its definitely not the first time they've been distributed by MS at all. I remember a couple years ago when there was a security bug in Crystal Reports, which was distributed with some versions of Visual Studio. Microsoft issued a security bulletin and patch for this issue, even though it was third party software.
Microsoft's policy has always been to support the software that it ships. In the past I know they have issued their own security bulletins to point to Macromedia's, but this may be the first time they've shipped updates to third-party Windows components.
|
#2 By
2539 (24.36.244.222)
at
5/12/2006 4:52:12 PM
|
Also, they've been providing driver updates (though scantily) via Windows Update for quite awhile.
And, the XP bug reporting tool that appears in when a program crashes has ties into the hands of some software vendors so that they can diagnose their bugs.
|
#4 By
17996 (66.235.19.95)
at
5/13/2006 1:51:07 AM
|
#4 I just took a look at that link, and cannot believe it.
Is that *ALL* the information Apple provides about its patches? If this were Microsoft, EACH one of those vulnerabilities would have had a complete bulletin, with severity, mitigating factors, workarounds, FAQs, and possible compatibility implications. Apple provides just a mere paragraph?!
A while back Stephen Toulouse (who works at the Microsoft Security Response Center) wrote on his personal blog that Apple needs to improve its security documentation. Man is he spot on.
This post was edited by PatriotB6007 on Saturday, May 13, 2006 at 01:52.
|
#5 By
32132 (64.180.219.241)
at
5/13/2006 12:40:31 PM
|
Firefox is emulating Apple:
https://bugzilla.mozilla.org/show_bug.cgi?id=328937
"You are not authorized to access bug #328937. To see this bug, you must first log in to an account with the appropriate permissions."
And thats for one of the 22 recent "acknowledged" security holes.
This post was edited by NotParker on Saturday, May 13, 2006 at 12:40.
|
#6 By
3 (62.253.128.12)
at
5/13/2006 4:26:36 PM
|
Do you ever comment on the actual articles or do you skirt around them by trying to make other OS's seem so much worse when problems crop up on the one you use?
This post was edited by Byron_Hinson[AW] on Saturday, May 13, 2006 at 16:26.
|
#7 By
32132 (64.180.219.241)
at
5/13/2006 5:25:12 PM
|
#7 "trying to make other OS's seem so much worse"
Nothing exists in a vacuum. Some people/journalists/tech sites like to pound away on Microsoft for its deficiencies ... but get really defensive when someone sheds light on their favorite OS or program.
I think a valid defense for Microsoft in rebutting these attacks is to compare their record against others. Apple has an atrocious record of openness when it comes to security. And lately it seems they have so many patches it is hard to keep up.
Would I prefer that Microsoft be perfect? Sure. But their security hiatus has worked really well in my opinion, with IE 6 being the biggest failure and IE 7 should fix most of that. But it appears that security holes (big ones) happen lots in Safari and Firefox.
Microsoft has a problem because their are still millions and millions of PC's out their running older versions of their OS that aren't patched. But Firefox and Safari are now getting a large number of unpatched users.
I think OS X and Linux and Firefox should take a security hiatus and fix their products.
|
#8 By
32132 (64.180.219.241)
at
5/14/2006 12:59:13 AM
|
Just in case you are an Apple user ...
http://news.yahoo.com/s/infoworld/20060513/tc_infoworld/78305
"Ferris said there were still holes in Safari, QuickTime, and the iTunes application that he reported to Apple but were not patched in the latest release. He did not publish details of those holes on his Web site in April, but he described them as critical flaws that allow remote code execution.
Ferris said he is considering releasing the details of the unpatched holes on May 14 on his Web site. He also says he has found new holes in OS X affecting TIFF format files and BOMArchiver, an application used to compress files. He did not provide details about the flaws or proof of their existence."
|
#9 By
13030 (198.22.121.110)
at
5/15/2006 9:25:47 AM
|
#7 :Do you [NotParker] ever comment on the actual articles or do you skirt around them by trying to make other OS's seem so much worse when problems crop up on the one you use?
No. NotParker rehashes the same anti-Forefox, pro-MS blather in nearly every post. Once in a while we get some fresh material but, like an aging, washed up night club comedian, we keep getting the same stale routine. (Perhaps, more pathetic is that we are still attentive to some degree...)
One bonus, however, is that I can click on his handy links to Firefox bug reports from here. I just wish he made the Windows and IE bug reports as handy...
|
#10 By
32132 (142.32.208.232)
at
5/15/2006 1:23:23 PM
|
Stale? Its never stale when Apple and Firefox create so many security holes regularly. I never have to go back more than a couple of days to find a recent security exploit for Firefox of Apple.
"One bonus, however, is that I can click on his handy links to Firefox bug reports from here."
Details still embargoed. So much for openness. And Apple is even worse!
|
|
|
|
|