[midas007]

"and the 'sploit can be mitigated before bringing it online to the outside world"

You should read more carefully.

Also, keeping people waiting without an ETA for a down service because you're learning isn't going to result in happy customers.

Furthermore, whomever is running these boxes needs to deploy NIDS and HIDS and properly secure their boxes, because clearly they don't understand what an attack surface is.

[tptacek]

Yes, whatever your security problem is, I'm sure some NIDS will clear it right up.

[midas007]

What a flippant, uncivilized, unconstructive comment.

Defense in-depth, every little bit helps.

[fyrabanks]

I'd assume s/he would isolate that machine for post-mortem and spin up a new service on a different box, unless we're talking poverty IT.