Comment Re:Well that's good and all, but (Score 1) 752
As a 10 year veteran, I offer that they very clearly need to revisit their gameplan for the following reasons.
The apparent total lack of a disaster recovery plan
The vulnerability was known for a month, the patch released for two weeks, and either wasn't noticed by the admin, put off for a rainy day, or was too daunting because of the all-powerful RPM system
The number of open services to the world *should* be relatively small. The 40 machines patched 99.9% don't matter. Not to patch your main ftp, web, or cvs server is (criminally?) negligent.
