Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft has released software updates to plug at least 570 security holes

krebsonsecurity.com

Post reply on HN
Print view View original

81–90 of 132 posts

Re: Microsoft has released software updates to plug at least 570 security holes

#81

Post by keyringlight »

leumon wrote: post #74
lousken wrote: post #12

It would be nice if microsoft had windows update for .net, visual c++, office, windows, edge ... just all their software in one updater, but that would be too easy...

It's (somewhat) possible with winget already.

IIRC winget is another mechanism with a CLI front-end that resembles a package manager. What it does is either hook into the windows store (another channel) for packages, or points to an installer which likely runs silently in the background, for example 'winget show adobe.acrobat.reader.64-bit' or 'microsoft.vcredist.2015+.x64'

Re: Microsoft has released software updates to plug at least 570 security holes

#82

Post by sublimefire »

charonn0 wrote: post #16

It seems like bug hunting might be the one area where AI is actually making the world a better place.

It was like a bunch of mythos scans through and through which then generated the reports for everyone to implement, not sure if in all orgs though. Mythos was great as it came from the top, i.e. a clear incentive. I think bug reporting otherwise does not reach the engineers unless an incident is raised by the customer care against a responsible team.

Re: Microsoft has released software updates to plug at least 570 security holes

#83

Post by pjc50 »

beebmam wrote: post #36
charonn0 wrote: post #16

It seems like bug hunting might be the one area where AI is actually making the world a better place.

99.9% of people complaining about AI making the world a worse place would be fully happy with AI if they shared in the economic benefits of automation.

The bonuses SK Hynix staff are getting might vindicate that point of view. Of course, that's from AI investment, not revenue itself. They are the extremely successful shovel manufacturers, who for once have managed to leverage their power collectively as employees to benefit from a one-off like this.

Perhaps it has always been the case that people would be happy if they shared the benefits, but that is not how the world run by billionaires works.

Re: Microsoft has released software updates to plug at least 570 security holes

#84

Post by tonyedgecombe »

Cthulhu_ wrote: post #67
throwaway27448 wrote: post #56

Earlier quoted context omitted.

What would be the point of any of this if the registry is still there? It'd just a particularly shit version of linux window management that happens to run games well

The registry was never an issue tbh, it's just a database that some companies decided to fearmonger about to sell you "registry cleaners". But if I'm wrong, please do point us in the direction of known issues with the registry.

It was easy to corrupt in the early days and performance was poor as it grew in size.

That was a long time ago though, it’s pretty solid now and has some benefits over storing settings in a bunch of text files such as more granular permissions.

Re: Microsoft has released software updates to plug at least 570 security holes

#86

Post by tonyedgecombe »

freitasm wrote: post #4

I wonder how many bugs will be introduced with these fixes...

I remember some research from IBM that showed that every two bug fixes introduced another bug. Effectively your queue for bugs is twice as long as you think.

Re: Microsoft has released software updates to plug at least 570 security holes

#88

Post by alex_duf »

shevy-java wrote: post #61

It is time to abandon Microsoft.

While I do think it's wise for people to start looking at alternatives, I don't think this specific news should sway one way or another.

Windows (like Linux or macos) contains an enormous amount of code, and with large code-bases you're certain to have security issues.

Finding these security issues and fixing them seems like a good idea, no matter how much you love or hate Windows.

Re: Microsoft has released software updates to plug at least 570 security holes

#89

Post by Chu4eeno »

Cthulhu_ wrote: post #68
freitasm wrote: post #4

I wonder how many bugs will be introduced with these fixes...

It depends on how good their testing practices and code review / auditing are. I want to believe they are some of the best in the industry, but that's making assumptions. But jumping to assumptions that fixes introduce bugs is a bit rash and assumes incompetence / unprofessionality / unmonitored AI usage / kneejerk bugfix processes.

Microsoft (in)famously fired all their QA people like a decade ago.

Re: Microsoft has released software updates to plug at least 570 security holes

#90

Post by throwaway27448 »

Cthulhu_ wrote: post #67
throwaway27448 wrote: post #56

Earlier quoted context omitted.

What would be the point of any of this if the registry is still there? It'd just a particularly shit version of linux window management that happens to run games well

The registry was never an issue tbh, it's just a database that some companies decided to fearmonger about to sell you "registry cleaners". But if I'm wrong, please do point us in the direction of known issues with the registry.

The registry absolutely is an issue—it's everything bad people make the command line out to be except ten times worse because they haven't bothered to fix it in forty years. You need to cooy and paste an incomprehensible string off the internet just to set the functionality of the caps lock key or rewire a file extension. Just straight up dogshit softwareif you weren't raised in the cult
Post reply on HN