Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day

securityweek.com

16 points·Bender··5 comments

Now map the time required for everyone involved into a developer's salary, get the average cost of fixing a vulnerability, and understand why companies have finally started paying attention to what programming languages and development approaches that are using on their products.

The amount of money fixing those 125 vulnerabilities goes down the drain, no one is paying for them, and they have to be delivered as per ongoing legistation in many countries.

"Safe" programming languages and development approaches are not the most effective way for safe programs - removal of code == removal of attack surface is. Of course, companies/economy rewards for more code lines/gross domestic product, not with less. If you don't originally need the code, there is nothing to hack.

So much sadness created by low quality meaningless products, so much time wasted for continual updating, so much money wasted for poor resource allocation.

An idea that fails in practice, as it provides zero assurance about code being shipped, as little as it is.

Proper safety, security is a property of excellent quality.

In it for the Vulns.

(Showing myself out)

> Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day

How many of them were introduced in the latest update ? /s

Reply on news.ycombinator.com