> I have thousands of fonts and have yet to see (or hear) of one that would trigger the security problems supposedly resolved by this update.
this is the complete backwards-thinking that causes people not to install security updates. Too bad it's repeated here in bold on a publication and subsequently even linked on HN.
Of course none of the fonts you have installed is using the security flaw.
But that newly created malicious font that is being used from that ad banner on that website you just visited is certainly going to use the security flaw to install additional malware on your system.
This has nothing to do with the existing fonts you deliberately installed but everything with newly created fonts that you don't deliberately install.
Another note: I really think MS should have fixed the vulnerability in their font parser instead of just disabling a whole class of fonts in a security update.
this is the complete backwards-thinking that causes people not to install security updates. Too bad it's repeated here in bold on a publication and subsequently even linked on HN.
Of course none of the fonts you have installed is using the security flaw.
But that newly created malicious font that is being used from that ad banner on that website you just visited is certainly going to use the security flaw to install additional malware on your system.
This has nothing to do with the existing fonts you deliberately installed but everything with newly created fonts that you don't deliberately install.
Another note: I really think MS should have fixed the vulnerability in their font parser instead of just disabling a whole class of fonts in a security update.