Quote:
Originally posted by bishop7
Not only that, but you can actually count on those patches to WORK! On top of THAT, with the exception of kernel patches, these security updates can be applied without having to reboot the server.
|
Not only that, but the word tends to get out and fast and because it's easier and quicker to get up and patched, more people actually keep current rather than be 0wned by some script kiddie.
I loved a report by
http://www.netcraft.com/ where they been keeping tabs on the number of exploits in deployed IIS servers over time. There are significant holes that are widely unpatched. There are even several that went down after M$ had a patch only to go up again as people either reinstalled or built new machines with IIS on them without keeping current.