Re: ISS Internet Scanner Cannot be relied upon for conclusive

From: Francis Favorini (francis.favoriniat_private)
Date: Fri Feb 12 1999 - 12:45:06 PST

  • Next message: Jeff Long: "[Fwd: rpcbind: deceive, enveigle and obfuscate]" 

    David LeBlanc [mailto:dleblancat_private] wrote...
> At 07:37 PM 2/10/99 +1100, Darren Reed wrote:
> >In some mail from David LeBlanc, sie said:
> >> We check file dates when checking for NT patches, and would catch
your
> >> example.
>
> >I don't see how that can be considered "adequate".
>
> Because it is going to be accurate on 99+% of NT systems.  The file
> timestamps are all the same when you install a hotfix.

What about daylight savings, which can change the time of a file by one
hour, which in turn can bump it to a new date?
What about patches that don't change file dates or sizes?  (Like some of
the recent Office 97 ones.)

	-Francis

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:34:22 PDT