North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: M$SQL cleanup incentives

  • From: Valdis.Kletnieks
  • Date: Thu Feb 20 16:36:02 2003 
On Thu, 20 Feb 2003 22:11:06 +0100, Iljitsch van Beijnum said:

> Seems to me that filtering is no longer necessary unless you have reason
> to believe your customers are going to install new vulnerable boxes or
> vulnerable software on existing boxes AND their pipe to you is so big

"new vulnerable boxes" has to be assumed as the default state for any new
installs, until such time as the vulnerability is patched in the base install,
and has been out for so long that installing the unpatched version will
inspire "ewww that's old" comments...

Attachment: pgp00007.pgp
Description: PGP signature