Submission + - Windows Update Can Hurt Security (cmu.edu) 2
An anonymous reader writes: Researchers at Carnegie Mellon University have shown that given a buggy program and a patch, it is possible to automatically create an exploit. They demonstrate this by showing automatic patch-based exploit generation for several Windows vulnerabilities and patches can be achieved within a few minutes of when a patch is first released. From the article: "One important security implication is that current patch distribution schemes which stagger patch
distribution over long time periods, such as Windows Update, ... can detract from overall security, and should be redesigned." The full paper is available as PDF, and will appear at the IEEE Security and Privacy Symposium in May.
