FLAME - security advisories on the 23rd ? uncool idea is uncool

[George Kontostanos]

On Sat, Dec 24, 2011 at 12:02 AM, Peter Jeremy <peterjeremy at acm.org> wrote:
> On 2011-Dec-23 23:40:10 +0200, George Kontostanos <gkontos.mail at gmail.com> wrote:
>>In any case, and IMHO this was not the proper time for this kind of
>>advisories considering the fact that many companies are in a freeze
>>period.
>
> My honeypot logs suggest that the black hats aren't taking a holiday.
> As Colin posted, the SO had to decide between two unpalatable options
> and, IMHO, he made the correct decision.  The details and fixes are
> now available - it's up to you to weigh up the risks of patching vs
> the risks of not patching.
>
> --
> Peter Jeremy

If a security advisory is announced, you have to patch, period!

Happy holidays to all. Black hats too :)

-- 
George