There go our plans for the pool... So, uh, how long do you suppose it'll be after Windows 2000 is released on February 17th before the first security holes are discovered and patched? Before you answer, remember that we're talking about Microsoft, here-- the company for whom "security" is evidently a four-letter word. Three days? Two? Trick question-- the answer, apparently, is "negative twenty-two." Yes, according to an article in Inter@ctive Week, last Wednesday Microsoft released its first Windows 2000 security patch, a full twenty-two days before the product is even available. Now that's service.

It seems that a gentleman named David Litchfield discovered a fairly major security hole back on January 17th, a full month before the product is slated to ship. Reportedly this bug "allows hackers to view files stored on a target web server," including, say, temporary files containing credit card information, password files, etc. A default installation of Windows 2000 has the bug enabled, and while a patch is already available to correct the problem, we just have to wonder what percentage of users are going to hear about the hole and actually take steps to fix it. Then again, we figure that anyone who's used to Windows server administration probably only brushes once a day, but downloads security patches after every meal. It just sort of goes with the territory, it seems.

The Spit-Take Quote of the Week award goes to Microsoft Security Manager Scott Culp, for saying-- and we warn you not to drink anything while reading this-- "It's not for us to assess the seriousness of this problem, because we take all security risks seriously." Now, to be fair, they did manage to squeeze out a patch in only nine days. And if you take it as read that all those yahoos actually running Windows 2000 betas on production systems deserve all the headaches they get ("at least six banks and three major computer manufacturers" are/were affected by the security hole; what, has someone been on a rampage with the Clueless Stick or something?), heck, there was no rush... Windows 2000 isn't even out yet, right? Oh, sure, you could take the attitude that the bug should never have existed in the first place, but nobody likes a smartass. This is innovation, buddy; if you don't like it, go rub two sticks together or something.