Official WMF security fix due Tuesday Jan 10
I must say, I’m starting to like Brian Krebs’ daily column a lot – his style is quite nice, easy to understand even for people who are not security geeks, while at the same time being quite accurate about the issues at hand. Take his article on the upcoming WMF fix, for example. Not only does he describe the problem quite accurately, deliver the news of the upcoming patch and some instructions for interim measures, he even admits that it would be much more newsworthy if Microsoft had announced that they won’t supply a patch on their next “patch day”. What’s probably also more newsworthy is the fact that it is taking them so long and they even discourage people from applying an unofficial patch that is reported to do a very good job, quite a remarkable achievement given the fact that no source code of the faulty DLL was available to the author of the fix…
Anyway, I think I’ll head over to Brian’s blog even more often than I used to… today he finally made it to my “must read” list.
2 comments January 4th, 2006