Skip to main content

Digital Lifestyle > News

Tue, 06 Oct 2009 ADOBE MAX: Faster Adobe patches promised after series of attacks

Adobe's CTO says the company can now patch bugs in two weeks

Robert McMillan

  • Email to a friend
  • Print this article
  • Bookmark this page
  • RSS feed

Hackers like Adobe Systems, and now the company knows it all too well.

Adobe's software has increasingly come under attack in recent years as hackers have come to realize that it can be easier to find flaws in popular software that runs on top of Windows than to dig up new vulnerabilities in the operating system itself.

That's led to a round of new attacks that exploit bugs in products such as Adobe's Reader, Apple's QuickTime, and the Mozilla Firefox browser, for example.

It's a reality that Adobe Chief Technology Officer Kevin Lynch freely acknowledged Monday in a press conference at the company's annual Adobe MAX developer conference, held in Los Angeles.

"We have absolutely seen an increase in the number of attacks around Reader in particular, and also Flash Player to some extent," he said. "We're working to decrease the amount of time between when we know about a problem and when we release a fix. That used to be a couple of months; now it's within two weeks for critical issues."

For Adobe this new reality became clear around February, when the company's Reader and Acrobat software was the target of a widespread attack. The volunteer watchdog group Shadowserver Foundation started sounding the alarm about the problem on February 19. And though security experts later determined that it had been exploited by attackers since early January, Adobe didn't end up patching its bug until March 10. It took two more weeks for the company to patch all of its supported platforms.

It was a public relations disaster for the company, whose sluggish response was pilloried by security experts.

Adobe Director for Product Security and Privacy Brad Arkin says the problems spurred good things, though. "We used that experience to help understand where the bottlenecks were and what process changes we could implement to improve our response time," he said in an interview on Monday.

In May, Arkin announced that the company would take new steps to stress-test its software, and improve its response-time to security incidents.

Now Adobe releases regularly scheduled security software updates (the latest is due next week) like Microsoft and Oracle, but if it needs to rush out a patch, it can do this much more quickly than before.

Adobe posted emergency patches in May and again at the end of July, both of which took about two weeks to turn around, Arkin said. "The turnaround for these things is something that has been a real focus," he said.

"We understand that given our wide distribution base we're going to be a target," Arkin added. "These types of software patches are going to be a fact of life for us."

(James Niccolai contributed to this report.)

Check out our new Macworld Mobile site.

Follow Macworld UK on twitter: www.twitter.com/macworlduk

Email A Friend

Email this article to a friend or colleague:



PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

<<prev article | back to news index | next article>>

Question of the day!

Mark Hattersley
Editor in Chief

Do you use Adobe Photoshop with a Wacom tablet?

Question of the day!

Do you use Adobe Photoshop with a Wacom tablet?

% of Macworld readers agree with you

Yes
TBC
No
TBC

How does a Wacom tablet improve the Photoshop experience?

124 characters remaining

Follow the conversation at @TabletChat

yes, it's fantastic learning how to draw digitally, I used to use Illustrator more when i just used a mouse, now i love PS :)RT @mystra_inc

I'm loving the #intuos4 so far, its improving my #photoshop experience so far, but its my first tablet so no comparison.RT @zerohypeart

I find using a mouse really clumsy and uncomfortable - the pen and tablet approach feels much more natural to me.RT @almostidealist

Latest News


More news...