Polish the turd, yo!
So there are likely still more surprises that will need amazingly similar patches in the future?
Microsoft had a chance to crush the SandWorm bug before it crawled out of the dunes, but botched the job, says HP. HP says that the Windows Object Packager, which SandWorm attacks, “had suffered a similar issue in 2012 with security bulletin MS12-005. HP researcher Matt Oh goes on to write that he “found striking similarities …
Please remind us again - how many patches were needed to kill Shellshock?
Three, I think, but they came within days or hours of each other, not two years. Also the proposed solutions were discussed in the open, ensuring the quality of the final solution, but giving bystanders an impression that there were even more issued patches in the end than there really were.