News for hackers. Stuff that matters.

A comment on Introducing .NET Core. Parent comment

Re:Introducing .NET Core by shanselman on Thursday December 04, 2014 @11:35PM (#8703023)
We've already got a way to patch zero days at the system level even if you use local NuGets. Fear not! This exists today, in fact.
[ Parent | on HN ]
Re:Introducing .NET Core by lloydsparkes on Friday December 05, 2014 @03:13AM (#8703414)
How is this possible?
[ Parent | on HN ]
Re:Introducing .NET Core by hokkos on Friday December 05, 2014 @05:18AM (#8703718)
It is enabled for .Net 4.5.1 as explained here : http://blogs.msdn.com/b/dotnet/archive/2014/01/22/net-4-5-1-...
[ Parent | on HN ]
Re:Introducing .NET Core by bruceboughton on Friday December 05, 2014 @08:24AM (#8704349)
Will patches be installed on servers that have never run the application but have it deployed, such as DR servers?

The mechanism describes seems to imply they won't as Microsoft Update won't know the vulnerable assembly is sitting on the machine waiting for a failover.

[ Parent | on HN ]
Re:Introducing .NET Core by jameshart on Friday December 05, 2014 @11:01AM (#8705126)
Same applies if I have an old build of an application which I push; it'll be vulnerable until Windows Update kicks in to patch it.
[ Parent | on HN ]