News for hackers. Stuff that matters.

A comment on Introducing .NET Core. Parent comment

Re:Introducing .NET Core by breischl on Thursday December 04, 2014 @06:21PM (#8702312)
"Critical security fixes must be deployed quickly and holistically in order to be effective. We are fully committed to making security fixes as we always have for .NET."

So they apparently have some approach for this, but didn't really say what it is. It'll be interesting to see how this works - some form of machine-wide assembly redirects, perhaps?

[ Parent | on HN ]
Re:Introducing .NET Core by zastrowm on Thursday December 04, 2014 @06:33PM (#8702362)
I believe that they already have a solution and have already used it[1].

> This is the first release from Microsoft that uses Security Updates for .NET NuGet Libraries Support. This feature enables Microsoft to update app-deployed .NET NuGet libraries, for machines with the .NET Framework 4.5.1 or later version installed. This security bulletin was released on 10/14/2014 as part of the monthly “patch Tuesday”.

[1]: http://blogs.msdn.com/b/dotnet/archive/2014/10/28/asp-net-mv...

[ Parent | on HN ]