Comments on: Twelve Word Tuesday: Conficker and Neeris Expose Lack of Due Diligence http://blogs.gartner.com/john_pescatore/2009/05/26/twelve-word-tuesday-conficker-and-neeris-expose-lack-of-due-diligence/ A member of the Gartner Blog Network Sat, 04 Feb 2012 17:10:54 +0000 hourly 1 http://wordpress.org/?v=3.0.4 By: John Pescatore http://blogs.gartner.com/john_pescatore/2009/05/26/twelve-word-tuesday-conficker-and-neeris-expose-lack-of-due-diligence/comment-page-1/#comment-1070 John Pescatore Wed, 27 May 2009 11:30:00 +0000 http://blogs.gartner.com/john_pescatore/?p=564#comment-1070 Even in the consumer market, I think we are long beyond the point where anyone using a Windows PC doesn't know *before* they buy it that they need to turn AutoUpdate on and have patches pulled down automatically. In the enterprise area, we are long beyond being long beyond on patching as just part of the cost of ownership of a Windows PC or server - about 8 years beyond that. Even for OSs that haven't been attacked as much or had as many vulnerabilities - really not news that you have to patch or you have problems. Just as when you buy a car you know you have to change the oil every 3,000 miles - when you buy a computer you know you have to patch it once a month. Change your home air filters; rotate your tires; brush your teeth - all of these are just accepted normal costs of doing business, same with patching. On PCs it isn't even hard. On servers, it takes more work - shielding approaches may be sufficient for many, just as I can decide to change my oil every 10,000 miles and take my chances. Even in the consumer market, I think we are long beyond the point where anyone using a Windows PC doesn’t know *before* they buy it that they need to turn AutoUpdate on and have patches pulled down automatically.

In the enterprise area, we are long beyond being long beyond on patching as just part of the cost of ownership of a Windows PC or server – about 8 years beyond that. Even for OSs that haven’t been attacked as much or had as many vulnerabilities – really not news that you have to patch or you have problems.

Just as when you buy a car you know you have to change the oil every 3,000 miles – when you buy a computer you know you have to patch it once a month. Change your home air filters; rotate your tires; brush your teeth – all of these are just accepted normal costs of doing business, same with patching.

On PCs it isn’t even hard. On servers, it takes more work – shielding approaches may be sufficient for many, just as I can decide to change my oil every 10,000 miles and take my chances.

]]> By: Rob Lewis http://blogs.gartner.com/john_pescatore/2009/05/26/twelve-word-tuesday-conficker-and-neeris-expose-lack-of-due-diligence/comment-page-1/#comment-1068 Rob Lewis Tue, 26 May 2009 23:55:13 +0000 http://blogs.gartner.com/john_pescatore/?p=564#comment-1068 Is this blaming the victim? Perhaps malware exposes real consumer expectations; purchasers may not realize that there is much work and expense to provide due diligence on their windows systems. Others may refuse and some folks are just unable to do so. Would the outcome be different if there was a warning label on the box that said that approximately n% of the rest of your life will be occupied protecting this system, after one installs it and as long as it in use? Is this blaming the victim?

Perhaps malware exposes real consumer expectations; purchasers may not realize that there is much work and expense to provide due diligence on their windows systems. Others may refuse and some folks are just unable to do so.

Would the outcome be different if there was a warning label on the box that said that approximately n% of the rest of your life will be occupied protecting this system, after one installs it and as long as it in use?

]]>