New answers tagged

0

I would not say that I am an expert in this so my point may not be valid. I quickly readed on Wikipedia On modern mobile devices such as smartphones, an over-the-air update may refer simply to a software update that is distributed over Wi-Fi or mobile broadband using a function built into the operating system From this quote we may note that the ...


4

However, for security patches, wouldn't a staggered release make it much easier for blackhat hackers to utilize the now-public vulnerabilities against users whose devices have not yet received the OTA, even though a patch for their device model is already available? Easier than what?, is the important question. Yes it will be easier for the hacker ...


54

Excellent question. Yes, your understanding is correct, as well as your rationale behind it. Staggering roll outs for new features often makes good sense. Staggering roll outs for security patches rarely is a good idea. As you pointed out, this gives even more opportunity for the vulnerabilities to be exploited. Perhaps even more importantly, the ...


1

When doing patch enumeration, Nessus looks at the installed patch list and only understands patches that are in its database. If the rollup patches which supersede the original patches are relatively new, then Nessus may see that the old ones are not applied without knowing that there's a rollup in place, and may falsely report that the original patches are ...


3

I'll be using modern Intel CPUs as an example of hardware. For most other hardware, you can identify bugs, but often you cannot patch it, but only work around it by trying to avoid the buggy behavior. Hardware bugs are identified similarly to the ways bugs are identified in closed source software. Internal audits and reports in the wild are mostly ...



Top 50 recent answers are included