News

2008: Year of the Vista Patch?

Just moments after Microsoft rolled out its last seven patches of 2007, security experts were prognosticating all over cyberspace, mainly pointing out the overwhelming number of fixes related to the Vista operating system in the December release alone.

Eric Schultze, chief technology officer of St. Paul, Minn.-based Shavlik Technologies, even went so far as to say 2008 would be the year of the "Vista Patch."

It looks like IT pros won't even have to wait that long to get a gander at some of the holes to be plugged via hotfixes and security patches in the forthcoming Vista SP 1 release. Microsoft this week released a comprehensive list of more than 300 security hotfixes to be included in SP1.

Many of the fixes -- ranging from the OS itself to related applications and services such as Internet Explorer, Excel, Visual Studio and even Unix migration -- are already in existence from successive Patch Tuesdays and can be downloaded and patched individually. But there are lots of new issues as well.

"Given what we've seen, what we are seeing and what we will see with this operating system, I would certainly expect the coming year to be full of Vista Patches," said Schultze.

According to Redmond, among the major aspects of SP1 will be improved remote security, especially regarding Remote Desktop Protocol files. RemoteApp programs can be accessed remotely through Terminal Services but appear as if they're running on the end user's local PC. Redmond is stepping up its commitment to security for desktop users communicating with servers running Terminal Services.

SP1 will also enhance OS performance on PCs connected to virtual private networks and other virtual machine peripherals, according to the software giant.

Additionally, as previously reported, application programming interfaces (APIs) will be configured in SP1 to help independent software vendors develop programs and applications extending the functionality of the Windows kernel. BitLocker encryption and a revamped Windows Security Center are also on that list.

As with all patch announcements and releases from Redmond, the list is subject to change, either contracting or expanding ahead of the official release of the service pack. Microsoft also stated in the list's abstract that "newer hotfixes and security updates will continue to be included in the Service Pack until closer to the release date."

About the Author

Jabulani Leffall is an award-winning journalist whose work has appeared in the Financial Times of London, Investor's Business Daily, The Economist and CFO Magazine, among others.

comments powered by Disqus

Featured

  • New 'Visual Studio Hub' 1-Stop-Shop for GitHub Copilot Resources, More

    Unsurprisingly, GitHub Copilot resources are front-and-center in Microsoft's new Visual Studio Hub, a one-stop-shop for all things concerning your favorite IDE.

  • Mastering Blazor Authentication and Authorization

    At the Visual Studio Live! @ Microsoft HQ developer conference set for August, Rockford Lhotka will explain the ins and outs of authentication across Blazor Server, WebAssembly, and .NET MAUI Hybrid apps, and show how to use identity and claims to customize application behavior through fine-grained authorization.

  • Linear Support Vector Regression from Scratch Using C# with Evolutionary Training

    Dr. James McCaffrey from Microsoft Research presents a complete end-to-end demonstration of the linear support vector regression (linear SVR) technique, where the goal is to predict a single numeric value. A linear SVR model uses an unusual error/loss function and cannot be trained using standard simple techniques, and so evolutionary optimization training is used.

  • Low-Code Report Says AI Will Enhance, Not Replace DIY Dev Tools

    Along with replacing software developers and possibly killing humanity, advanced AI is seen by many as a death knell for the do-it-yourself, low-code/no-code tooling industry, but a new report belies that notion.

  • Vibe Coding with Latest Visual Studio Preview

    Microsoft's latest Visual Studio preview facilitates "vibe coding," where developers mainly use GitHub Copilot AI to do all the programming in accordance with spoken or typed instructions.

Subscribe on YouTube