Anit-Virus help for all of us??????

Suresh Ramasubramanian suresh at outblaze.com
Mon Nov 24 21:01:29 UTC 2003


Valdis.Kletnieks at vt.edu  writes on 11/24/2003 3:43 PM:

> Question: What speed access is needed to guarantee "mean time to download
> patches" is significantly less than "mean time to probed by packet-to-0wn"
> (significantly == 20x lower still gives a 5% chance of getting 0wned while
> patching)?

That'd have to be very fast indeed, given that only one windows update 
mirror is used at a time, and patches are downloaded and applied in 
sequence.

Two ways to get at least some safety -

# Machine behind NAT while it is being updated
# Patches preferably downloaded onto a CD and applied offline

-- 
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations



More information about the NANOG mailing list