dilemmas

Thu Nov 3 03:03:32 UTC 2016

On Wed, Nov 2, 2016 at 6:47 PM, William Herrin <bill at herrin.us> wrote:

> On Wed, Nov 2, 2016 at 10:39 PM, Randy Bush <randy at psg.com> wrote:
> > the sysadmins' dilemma: do you install today's critical update or wait a
> > day until the next one is out before you reboot 50 servers?
>
> Neither. You wait for the normal patch cycle because the other six
> barriers to exploiting the vulnerability will work just fine until
> then.
>
> The vulnerability that cuts through every layer of a well engineered
> defense is rare.
>

As is the well-engineered defense.

Royce