Forum Moderators: open
Microsoft on Thursday said next week's Patch Tuesday would include eight patches, five of them critical, including one addressing a vulnerability in Excel. A company representative declined to confirm whether the patch for its spreadsheet software addresses a vulnerability that has seen "zero-day attacks" which target unpatched security holes. But given the fact that both that Excel vulnerability and the Excel patch slated for Tuesday affect Microsoft Office 2000, 2002, 2003, and 2007, as well as Microsoft Office 2004 and 2008 for the Mac, it could be the same weakness.Also on Tuesday, Microsoft will provide updates addressing critical remote code execution vulnerability in Internet Explorer, Windows, and Office, and less severe vulnerabilities in Windows and Microsoft's Forefront Edge Security.
Web based office software is even riskier. I prefer to risk someone attacking my own PC rather than 1,000 users server.
I've used free/open source and the paid ms office and I'd say that they are both good if you're a basic user. If you do corporate level stuff MS outperforms everybody (currently) so its not that of a new or big deal that somebody found security exploits.
There is no software without possible security exploits - I'm a programmer and I'm constantly finding new bugs and more security threats in even the simplest programs. There is no way to be protected against all possible attacks! Just live with it!
Venetsian.
Also on Tuesday, Microsoft will provide updates addressing critical remote code execution vulnerability in Internet Explorer, Windows, and Office, and less severe vulnerabilities in Windows and Microsoft's Forefront Edge Security.
Now you know why we abandoned the MS bloatware for OpenOffice and Firefox ages ago.
Web based office software is even riskier. I prefer to risk someone attacking my own PC rather than 1,000 users server.
It is funny because it is kind of a lose-lose. If you need your documents to be secure, private and safe guarded, one might say you should not store them on an online service provider site. However storing them locally opens up the door to local exploits (like those mentioned above). So you have to pick the lesser of two evils... and we all know which choice that is...;-)
Easier to secure local than non-local... at least that's my opinion. So far, all the MS patches have been good to me so I'm not complaining (though I do miss WordPerfect)....
We could probably do less with the knee-jerk anti MS vitriol. The reality is that most people use MS Office. It's got the majority market share. Whether that's by individual choice or that of one's employer is irrelevant. There's a vulnerability. MS is patching it.
Also, for sure Adobe products kick ass and are the absolute best. But again, for all my webmaster needs, GIMP is more than enough, so why should I pay for a proprietary tool? Even their PDF files use proprietary protocols. It's unacceptable.
But I always keep a copy of Win XP on a separate partition, with all Office and Adobe tools in there, in the case there is something I can not do on Ubuntu. I personally believe this to be the safer solution.
The reality is, MS/Adobe are professional and better features-products, but 99% of the people (including me) don't really need all these features, and they are very vulnerable and bloated.
BTW: they're out now, should show up automatically if configured to do so.
Otherwise WSUS servers can be used on a company level or a user mightneed to surf to [update.microsoft.com...]
[edited by: bill at 5:26 am (utc) on April 15, 2009]
[edit reason] fix URL [/edit]
It is funny because it is kind of a lose-lose. If you need your documents to be secure, private and safe guarded, one might say you should not store them on an online service provider site. However storing them locally opens up the door to local exploits (like those mentioned above). So you have to pick the lesser of two evils... and we all know which choice that is...;-)
my data is my data, I will never upload it unto some ambiguous server somewhere where the user of that server can do whatever they want with your data. Here one day gone the next.
I find it suprising people are so willing to throw their important data into space and just pray nothing happens. As venetisan said... chances of your computer coming under attack where someone is looking to steal documents? Or a big online server where 10000 of people store documents. Where would you go if you were looking to steal data? Yes we all know which choice that is.
[edited by: J_RaD at 4:28 am (utc) on April 24, 2009]