Comments on: Exploit code raises Windows worm alarm

Code has been written to exploit the latest Windows flaws, but it isn't publicly available. Experts predict a public exploit and worm are near.

Hope it hits hard

I hope this worm hits hard, more specificly, hits Microsoft hard. When there are coders out there that write exploits.. what do you expect to happen when you publicly announce that you have a vulnerability in a specific part of an OS. Why don't they wise up, say they have a vulnerability, release the patch, but don't say what it is. Make the coders work for the exploit they wish to write. It's just that simple.

[aabcdefghij987654321]

Unreasonable expectations

Most companies only install patches that they are told are important and that they believe may affect them. If you don't tell what the problem is and stress the severity of it, many companies will simply opt not to install the patch.

Likewise once the patch is released a hacker can compare the original unpatched code to the patched code and figure out exactly how to write an exploit of any patched software that fixes an exploitable problem.

Hope it hits hard

I hope this worm hits hard, more specificly, hits Microsoft hard. When there are coders out there that write exploits.. what do you expect to happen when you publicly announce that you have a vulnerability in a specific part of an OS. Why don't they wise up, say they have a vulnerability, release the patch, but don't say what it is. Make the coders work for the exploit they wish to write. It's just that simple.

[aabcdefghij987654321]

Unreasonable expectations

Most companies only install patches that they are told are important and that they believe may affect them. If you don't tell what the problem is and stress the severity of it, many companies will simply opt not to install the patch.

Likewise once the patch is released a hacker can compare the original unpatched code to the patched code and figure out exactly how to write an exploit of any patched software that fixes an exploitable problem.