RE: MS Security Chief: Windows Never Exploited UntilPatch Available

["Kohlenberg, Toby" <toby.kohlenberg () intel com>]

He's a really sharp guy (used to work with him), so I have to hope 
this is a misquote. I've talked to him about this before and I
think that it was probably meant to be something more like
"exploits happen much more rapidly after the patch is released".
I don't think anyone would be silly enough to claim that we've
never seen an exploit before a patch...

t

> -----Original Message-----
> From: dailydave-bounces () lists immunitysec com 
> [mailto:dailydave-bounces () lists immunitysec com] On Behalf Of 
> Dave Aitel
> Sent: Thursday, February 26, 2004 10:51 AM
> To: Bradley, Terry (CONTR)
> Cc: dailydave () lists immunitysec com
> Subject: Re: [Dailydave] MS Security Chief: Windows Never 
> Exploited UntilPatch Available
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> You have to wonder what it was he meant to say. Surely not what the
> bbc is quoting him as saying. But I can't figure out what.
>
> - -dave
>
>
> Bradley, Terry (CONTR) wrote:
>
> | This just in from Slashdot:
> |
> |
> |
> | "The head of Microsoft's security business and technology unit
> | states <http://news.bbc.co.uk/1/hi/technology/3485972.stm>  that
> | Windows is never vulnerable until a patch appears, and that
> | releasing patches is what causes exploits to be developed. Good
> | quotes: 'We have never had vulnerabilities exploited before the
> | patch was known', and '[he] could only think of one instance when a
> | vulnerability was exploited before a patch was available'. Erm..."
> |
> |
> |
> | tb
> |
> |
> |
> | 
> ----------------------------------------------------------------------
> |
> |
> | _______________________________________________ Dailydave mailing
> | list Dailydave () lists immunitysec com
> | http://www.immunitysec.com/mailman/listinfo/dailydave
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFAPkATzOrqAtg8JS8RAq5FAJ46Tc+m8V6qYPPNjjKzrermhMD2kQCfVd40
> KXERHZc5wY5bXGuv45Dn9nY=
> =iDNA
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Dailydave mailing list
> Dailydave () lists immunitysec com
> http://www.immunitysec.com/mailman/listinfo/dailydave
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave