[Our patch] fixes the specific vulnerability itself. It's not going to break any of the JavaScript functionality unless it's a Web site that's being specifically malicious. You can't have people without protection for 16 more days when an attack is underway. |
Companies like Microsoft are not equipped to deliver protection in a timely manner. |
For large organizations, it's just infeasible. One day is pretty fast. |
It is definitely a stretch to call this a backdoor. Every security flaw ever found in Windows could have been a backdoor, and we would never have known. I think it's a bit 'tin foil hat' to try to say they are backdoors. |
It just allows for a lot of ways that you can manipulate systems or services to basically use UPnP to either hide attacks or use UPnP as a jump point for other attacks, |
It won't surprise me if there's another [problem] that has not been patched. It won't surprise me at all. |
It's basically almost any Windows PC right now that you can compromise if you can trick a person to going to the wrong Web site or opening the wrong e-mail. |
It's disappointing that Microsoft says the threat isn't big because it's only been found on 200 URLs. Why are they thinking about these attacks like they think about network worms? The risk of the quiet, targeted attack is very, very high and this should be an emergency situation for Microsoft. |
It's kind of like having the cure and not sharing it with anybody. |
It's really unclear. There's a good chance we will never know where it came from. |
Not every hacker is a cracker, |
Obviously these things (fixes) are experimental in nature but considering the options of being vulnerable or at least having a fighting chance--well, I think you get the point. Again, this is just another mitigation option until Microsoft releases their patch, which last was scheduled for April 11th, or 16 days from now. |
One of our customers asked which patch they should deploy if there starts to be a lot of third-party patches. I told them, it's just like picking a dentist or a plumber -- you're going to go with someone who's got a good reputation. |
That one is really easy to exploit. |
That's a long time to leave several million Windows users without any sort of protection. |