Unreal security hole

[Daxim]

http://slashdot.org/article.pl?sid=03/02/11/2159203&mode=nested&threshold=3

What this brings remains yet to be seen.

[Thwark]

it occurs to me that many security issues wouldn't be security issues if the developers were capable of working on it secretly, instead of every big-ass website posting about security holes, inciting every two-bit script kiddie to try and figure it out, or abusing it.

but then, i know how much people love bad publicity, and pointing out the faults of others.

[Daxim]

RTFA, mon cher llama. Epic had ninety days to work with the advisors to fix the exploit, which they preferred to squander instead. Full disclosure is an effective tool to pressure developers to get off their lazy butt to protect the affected user base/customers.

Closing one's eyes before a problem does not make it go away.
> man security_through_obscurity

[MrEricSir]

Closing one's eyes before a problem does not make it go away.
> man security_through_obscurity

Are you sure? Microsoft doesn't seem to agree with you, and they're always right about everything.

[Omega]

oh oh :roll: you said Microsoft.

*Omega runs and hides. :wink:

[modetwo]

oh oh :roll: you said Microsoft.

What?

Last night you told me you LOVED Microsoft.

[Omega]

*Grabs mOdEtWo and runs.

"Get the hell away from all this! It's going to blow!" :wink:

[Antero90]

AAAAAAAAAAAAAAAAAAAAAAAAAAAAH!
Blue Screen of Death!

[modetwo]

AAAAAAAAAAAAAAAAAAAAAAAAAAAAH!
Blue Screen of Death!

Ahh, another Microsoft lover! Join us guys!



/me runs off...

[TeeJay]

This is definitely a serious issue that Epic has mishandled, but if it took someone years to find the hole, and there is no claim that anyone actually has exploited it, I am not losing any sleep. Computer security firms love to issue these "scare" press releases as a way of touting their expertise.

[Omega]

But still, if the problem is known, and it can be fixed they should fix it.

[modetwo]

But still, if the problem is known, and it can be fixed they should fix it.

Yeah, but do you think they will release a new update for UT?

I think not... :|

[Omega]

If people keep talking about it, they might. Who knows.

[The_Judge]

HEY! MICROSOFT IS NEVER WRONG! MICROSOFT>you! The security holes in our systems ARE NOT BUGS! They are features!

[LaughingRat]

AAAAAAAAAAAAAAAAAAAAAAAAAAAAH!
Blue Screen of Death!

I read somewhere that Microsoft is going to be adding a lot of features and functionality to the Blue Screen of Death, since that's where their users spend something like 80% of their time.