Do Vista Users Need Fewer Security Patches Than XP Users?

re: Do Vista Users Need Fewer Security Patches Than XP Users?

Wayne Anderson — Tue, 12 Feb 2008 06:28:46 GMT

I love the line about patching end users vs patching the operating system. While an updated operating system which is developed using an attempt at secure programming practices could possibly provide fewer attack vectors than previous versions of that product, I think it important to always note that this is much like discussions about precision rifles or precision art tools, if you like.

The tools are often far more accurate/secure/faster than the folks who make use of them. In such cases, an organization will be well served by a good WSUS infrastructure and coherent patching practies but may be better served by strong policy and recurring user education.

re: Do Vista Users Need Fewer Security Patches Than XP Users?

werder — Fri, 01 Feb 2008 23:04:49 GMT

I think time will solve all these problems. We have been using WinXP for about 5-6 years and Vista for only 1 year. Besides there may still exist many unknown vulnerabilities which are not discovered yet. That is why it does not make any sense comparing Vista to XP.

re: Do Vista Users Need Fewer Security Patches Than XP Users?

Zorgon3 — Wed, 30 Jan 2008 07:54:10 GMT

You also need to analyze the number of users for Vista in its first year vs XP users in the first year. Seeing as Vista is widely and correctly regarded as a "debacle", the number of security attacks would be proportionally lower as well.

re: Do Vista Users Need Fewer Security Patches Than XP Users?

Rod Taylor — Tue, 29 Jan 2008 02:26:38 GMT

Jesper, you've proven to me again why you and Steve Riley are way up the top of my list of people I trust to discuss security issues wrt Windows. As an IT Manager, you answered the *exact* question I was asking after reading the original report - how do XP SP2 and Vista compare over the last 12 months re patching? The original report was pretty much useless. Who cares how a product performed 6 years ago compared to how a new product performed this year?

Great work and it's a shame we don't get to see you at TechEd Australia any more.