⬇ Download holy card: ·
⚔ Commemorated today: The Scourge of the Satellite Modems (2022)Saint JASBUG, Flaw of Design
Patron of Group Policy, network shares, and flaws that can't be fixed with a single line.
Life
On 10 February 2015 Microsoft published MS15-011 for CVE-2015-0008, found by Jeff Schmidt of JAS Global Advisors and reported over a year earlier. It was not a coding error but a design one: a domain computer downloading Group Policy did not check it was talking to the real controller, and an attacker on the network could make it run code. The fix took months of work and a setting that had to be switched on by hand.
Prayer
O Saint JASBUG, who lives in the design and not the code, let our clients ask the server who it is. Amen.
How to celebrate
Celebrated by installing MS15-011 and actually configuring hardened UNC paths, which the patch alone does not switch on.
A flaw of design calls for a cure of patience.