[17914] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Microsoft Security Bulletin MS00-092

daemon@ATHENA.MIT.EDU (Boyce, Nick)
Tue Dec 5 12:23:23 2000

MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Message-ID:  <C1B2296C5D3ED11182DB00805F9A097E01506219@GBHBM001>
Date:         Mon, 4 Dec 2000 19:49:46 -0000
Reply-To: "Boyce, Nick" <nick.boyce@EDS.COM>
From: "Boyce, Nick" <nick.boyce@EDS.COM>
X-To:         "forrest@mibsoftware.com" <forrest@mibsoftware.com>
To: BUGTRAQ@SECURITYFOCUS.COM

On 02 Dec 2000, Forrest J. Cavalier wrote :

> I dislike this new format of MS security bulletins
[...]
> It is more convenient to quick scan details in an email,
> rather than open up a browser.
[...]
> There must be many people who still read their email off-line.
[...]
> Will this URL work a year from now ?
[...]
> there was a time that microsoft URLs had a half-life of a few
> months.  And occasionally required enabling javascript.
[...]
> Will Microsoft announce every correction/clarification in email, or
> will they sometimes update the web page silently ?
[...]
> If I get a vote, I vote to return to the old format.

Couldn't agree more, on every point - hear hear.

I wondered if I'd missed some soothing explanation of the new format. All
I've seen is the comment at the head of MS00-091 saying
  "We are in the process of changing our bulletin mailing format for
  better customer satisfaction. If you have any feedback please send
  mailto:secfdbck@microsoft.com."

Let's vote please, Microsoft.

PS: in *this* bulletin (MS00-092) the email says affected software = SQL
Server 6.5 and 2000, whereas the linked web page says affected software =
SQL Server 7.0 and 2000, so ... er ... which is it ?

Nick Boyce
Systems Team,
EDS Healthcare, Bristol, UK

home help back first fref pref prev next nref lref last post