Live data from Hacker News

Microsoft has released software updates to plug at least 570 security holes

krebsonsecurity.com

11–20 of 132 posts

Re: Microsoft has released software updates to plug at least 570 security holes

#14

Sounds like a lot but compare it to Edge also being patched for 428 Chromium CVEs this month. If 20 years ago you told me a single piece of software had 428 vulnerabilities I wouldn't have believed it. If Chromium has that many security bugs, perhaps the move fast and break things approach of spraying diarrhea masquerading as code into a keyboard — in a rush to add new features no one asked for — needs to be reexamin…

20 years ago software wasn't as much battle tested as today, had way less feature set, was less connected to the internet, and etc. 428 CVEs looks small, assuming not all have CVSS 9.8 or something.

It was more tested as real testers were testing it. Nowadays, AI just checks the code.

Re: Microsoft has released software updates to plug at least 570 security holes

#15
post #12

It would be nice if microsoft had windows update for .net, visual c++, office, windows, edge ... just all their software in one updater, but that would be too easy...

Isn't that... Windows Update? At least last time I looked it would update .net runtimes, Office, what else? OK, Visual Studio has its own update mechanism. Edge is part of the OS, isn't it?

Re: Microsoft has released software updates to plug at least 570 security holes

#17
post #12

It would be nice if microsoft had windows update for .net, visual c++, office, windows, edge ... just all their software in one updater, but that would be too easy...

Isn't that... Windows Update? At least last time I looked it would update .net runtimes, Office, what else? OK, Visual Studio has its own update mechanism. Edge is part of the OS, isn't it?

[dead]

Re: Microsoft has released software updates to plug at least 570 security holes

#19
post #18

It seems like bug hunting might be the one area where AI is actually making the world a better place.

How many were introduced by misuse of AI coding/vibe coding though?

How many were known, and put on the roadmap because war got hot?
Post reply on HN