[access-uk] Re: Why you should patch Windows
- From: "Justin R" <mypc128@xxxxxxxxxxxx>
- To: <access-uk@xxxxxxxxxxxxx>
- Date: Sat, 29 May 2004 16:36:28 +0100
I suppose they get the idea that firewalls and anti-virus software is enough
to combat it. seems like from your story andrew that isn't the case at all.
I think they just don't seem to allow themselves a time to do routine
patching and maintenance of their networks in these educational
establishments. Silly really. I patch mine everytime automatic updates
were into action and... although some would advise not to rely on automatic
updating. it's worked fine for me.
I got one of these windows patches before they became know world wide when
the last virus hit <smile>. so, i always use that method.
Jusitn
----- Original Message -----
From: "Andrew Hodgson" <andrew@xxxxxxxxxxxxxxxxx>
To: <access-uk@xxxxxxxxxxxxx>
Sent: Saturday, May 29, 2004 2:44 PM
Subject: [access-uk] Why you should patch Windows
> Hi all,
>
> Of course, you all know this, but here is a little story for you:
>
> A local university recently had network problems. A year ago, they had
> spent thousands of money on a large expensive firewall, to stop viruses
> coming in from the outside.
>
> Since they had this firewall, they didn't bother to patch any Windows
> workstations, other than installing the latest service packs (SP4 in the
> instance of Windows 2000, and SP6A in the instance of NT4).
>
> A couple of years ago, whilst I was still there, I asked them what they
> did regarding internal security of workstations, the answer was that the
> firewalls would take kare of all this.
>
> Anyway, I got a phone call yesterday from someone who still works there,
> because early yesterday morning, a member of staff (who is still
> unidentified), plugged in their laptop into the network as normal, not
> realising they had the virus. Within minutes, over 100 Windows machines
> were infected with Blaster, shutting each other down, and bringing the
> entire network into a mess. The technical team spent the whole of
> yesterday patching the systems up, but also having to ensure the systems
> that were not switched on were also patched.
>
> The frightening thing is, that where I work, the exact same policy is
> used (i.e, don't patch until the next service pack comes out).
>
> Andrew.
>
Other related posts:
