[Full-disclosure] Microsoft product vs Microsoft patch
tonnerre.lombard at sygroup.ch
Fri Aug 25 07:25:57 BST 2006
On Fri, 2006-08-25 at 08:54 +0530, Ajay Pal Singh Atwal wrote:
> Ahhh well maybe we are forgetting the actual **for_real_men**
> technique for patching vulnerabilities and problems that can only be
> applied to GNU/ Linux like systems.
> The diff files (aka patch files), applied directly to the source code,
> can you match their efficiency in terms of bandwidth.
Excuse me, do you happen to use Gentoo? ;-)
No customer in the right mind would do this though, especially since you
can get problems with compiler bugs easily so no manually compiled
package can ever be supported by any manufacturer, simply because the
binary might always come out different, depending on the system
configuration. Thus, there wouldn't be any way for the distributor to
test and torture the packages, so no distributor in the right mind would
ever want to waste time supporting your build.
Binary patches, like with xdelta, don't share these problems. They do
have a whole lot of different problems though which invalidate the
measurement as well.
Loesungen mit System
Tel:+41 61 333 80 33 Roeschenzerstrasse 9
Fax:+41 61 383 14 67 4153 Reinach BL
Web:www.sygroup.ch tonnerre.lombard at sygroup.ch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 824 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060825/530119cd/attachment.bin
Full-Disclosure is hosted and sponsored by Secunia.