Forum Moderators: open
Anyone else having problems? I continue to connect with WebmasterWorld and much of the rest of the Web just fine.
25. 1 at 17:09:57
25. 1 at 16:54:27
25. 1 at 11:17:39
25. 1 at 00:21:54
25. 1 at 00:21:47
25. 1 at 00:17:16
:-((
Today Saturday, I heard from TV that all internet connections in Korea are down, I can not access any site in korea
I also saw google, yahoo and netscape down for about 2-5 minutes.
This was a big one!
Using this metaphor, microsoft should be alcohol or some heavy drug that kills the brain cells.... All I have to say is damn you microsoft!
It makes you wonder if this was a teennager hacker attack or a coordinated cyber terrorism attack.
Damn both of them. If M$ performed appropriate vulnerability tests in first place, this would never be happening.
If a car manufacturer has a problem, and needs to fix something on one of their cars they issue a recall, and spend money to inform people that there is a problem that needs to be fixed or else they get sued.
What does MS do? They issue a patch and stick it on their site. I think MS does very little to inform people that things need to be patched. There are so many servers out there run by 1 tech guy for a small company. He likely doesn't know about all the new patches coming out. It seems like every other week MS is putting out a patch for some critical problem.....
What will fix this problem? A huge lawsuit against M$ for liability on these virus attacks. If M$ had to pay out a billion dollars for having shoddy software they'd fix it in a heartbeat.... IMO :)
What will fix this problem? A huge lawsuit against M$ for liability on these virus attacks. If M$ had to pay out a billion dollars for having shoddy software they'd fix it in a heartbeat....
I think a better solution would be to execute the system administrators of unpatched boxes right on the spot.
You're definitely right about security update notifications being almost none existent.
Is there a good mailing list which provides this info?
I guess many people including me lost advertising money.
Depends on your industry. It was a brief outage (so far) and could have been much worse. Maybe a test?
Many online businesses are usually at their minimal traffic times on Friday evenings and into early Saturday mornings. At least that is the case here in the US.
Server administrators need to do everything within their power to prevent this from happening. I believe ours is set up to automatically notify anytime a patch is available from MS. The same principle applies to individual PC users through the Windows Update properties.
i didnt read all the psots here but my providers said"we are sorry, it is not our fault". and then they say that this vulnerability is known since june last year and that ther is patch. so..who is here ot blame - MS or them not installing patch that is ther for almost a year?
or maybe they instaled patch but traffic was coming from OTHER servers who dont have this patch?in that case it is really not my isp-s fault :)
shame to that yet again, microsoft get the blame. sure their software isn't perfect, but nor is *nix and the modules run on *nix servers.
if penalties are imposed on microsoft, they should be imposed on other software authors too - the people that wrote apache, php, the many linux distributions and so on - they should all be treated the same.
but it still won't stop sloppy server administration, which is where the real problem is .......
I think a better solution would be to execute the system administrators of unpatched boxes right on the spot.
The problem is these people don't see themselves as system administrators. They are just the person in charge of the server. They really are not that well informed. The selling point of M$ products is their ease of use. It takes very little tech knowledge to set up a M$ box and maintain it, set up web sites etc. This means anyone can be a system admin from the bosses 13 yr old kid to a high school drop out who read a book...
Is there a good mailing list which provides this info?
How is a bottom level tech guy who maintains the company M$ server supose to find out about updates? MS doesn't tell anyone. It's not on the news. They don't know about tech sites that tell you when patches are available. The server was fine yesterday why is it broken today?
Is there any other product group out there besides software that can get away with not informing customers that there are critical problems with their products?
What if food companies just had to put a notice deep on their website that batch 0056412 has been causing people to get food poisining? They'd get the crap sued out of them...
I really have to put the blame on M$. If they did any kind of job informing server admins about updates then I'd say blame the admins. But as of today, I am shocked that M$ can get away with defective products, and not doing anything substancive to inform admins about updates... IMO
[done venting] :)
I guess many people including me lost advertising moneyI know that I've lost some, my sites are still down, no word yet from my host on it.
M$ is the one to blame because it puts their products in the market without properly testing them for security gaps.
Is this the first M$ product fault? I don't think so. MS SQL server probably already had more than 100 fixes and it will have much more. I ask you why? Are these faults system administrators'? Definetly not!
M$ is the one to blame. Certainly, they have the money and can afford to pay an army of hackers to test their products before they put it available on the shelves.
Remember, we are talking about a company that has 30 billion in cash and have never been known as offering secure and reliable softwares.
The problem is these people don't see themselves as system administrators. They are just the person in charge of the server. They really are not that well informed. The selling point of M$ products is their ease of use. It takes very little tech knowledge to set up a M$ box and maintain it, set up web sites etc. This means anyone can be a system admin from the bosses 13 yr old kid to a high school drop out who read a book...
Well, if a lawyer, a doctor, a realtor, a financial advisor does not do his job well - he might lose his license and even face charges, not to mention his employment.
What will happend to 99% of admins of those boxes? - Nothing.
If a pharmaceutical company creates a drug that kills people - the company is at fault.
If that company releases the info that the drug is not safe, but some doctor still prescribes it to his patients - the doctor will get blamed, not the company.
If people start visiting 13 year old doctors - that's people's fault. They should think better.
Microsoft sucks, but you can't blame them for not shoving the updates down your throat.
I think if you compare the software industry today with the motor industry or the food industry you are doing it an injustice.
Compare the s/w industry with the motor industry of 1925 and you probably have a good comparison in terms of maintenance and reliability.
M$ is the one to blame because it puts their products in the market without properly testing them for security gaps.
There are no secure products. I run my stuff on BSD and have many clients running Linux and Windows. None of them are 100% secure.
Check the advisories and erratas for the system of your choice. You'll be surprised how much you didn't know :)
