That Old-Time Security Religion
Like professional athletes who seem to discover religion after every indiscretion, Microsoft has found securityagainLike professional athletes who seem to discover religion after every indiscretion, Microsoft has found securityagain. When breaches occur, the born-again Microsoft issues, maybe, a couple of new patches and a couple of workarounds. This time, after the little Code Red, uh, imprudence, Microsoft has also added a very useful tool to its standard redemption rites.
Microsoft Network Security Hotfix Checker (known as Hfnetchk and downloadable at support.microsoft.com/support/kb/articles/q303/2/15.asp) is a command-line tool that let me quickly check all the Windows NT 4.0 and Windows 2000 servers here in the East Coast lab for missing patches. Besides finding holes in the operating system and in Internet Information Services, the checker also looked for missing patches for Internet Explorer 5.01 and later and for SQL Server 7.0 and 2000.