"Microsoft alerted us this time about seven vulnerabilities of which five were rated critical and two important. There are vulnerabilities in the Server service, the DHCP Client service, Excel and Office that could allow remote code execution."
Post a Comment
Member since:
2006-03-06
The latest installment in the endless patch cycle. No matter what system you use, it seems like there is constant patching involved. Of course, I'd *rather* have them giving out the patches...it means they are actually fixing bugs and closing security holes; the alternative wouldn't be pretty.
Member since:2005-07-06
Member since:2005-07-06
Member since:2006-01-10
Member since:2005-07-06
Member since:2005-07-07
Member since:2005-07-06
All of them !
GNU/Linux is one OS , with many vendor and supporter.
Windows 98 stopped being supported in 2000 , Microsoft patched it until july 2006.
Windows ME never was really supported , I pitty the fool who got to buy it , it got patched until july 2006.
If you got the money and whant older version upgraded and patched , there are vendors who can do the job for you , but you are better served by the latest offerings.
Member since:2006-03-06
Member since:
2005-07-06
Member since:2006-03-12
Member since:
2005-11-05
Seriously guys, stop bashing Microsoft. They are *really* trying to make Vista a secure product. If they weren't, they wouldn't be demoing it's security features at real hacker conventions. Let them release it and then flood them with angry comments once holes are found in their new security features. A good example would be alsr:
http://www.tuxedo-es.org/blog/2006/07/06/vista-probe-02-release/
Microsoft is trying to catch up (security wise) where Linux was about 3-5 years ago. Let them try and if they do a miserable job, you will know as you see reports of worms ravaging the net.
Note I am writing this from an Ubuntu desktop at work as a Unix/Linux systems admin...
Member since:2006-03-06
Member since:2005-10-11
Member since:2005-11-05
If I install a Windows box and strip al crap with nlite and only install sendmail and apache on it it is as much secure as OpenBSD is.
ALSR, PIE, W^X, SSP, TCP Window Randomization, swap encryption, etc... Those are all proactive security features that go into OpenBSD. They come at the price of making it run more slowly and more difficult to use but increase security.
Microsoft uses the reactive approach to security and would not even compare to OpenBSD in your scenario. If you really don't understand something, please don't speak like you do.
Member since:2005-07-06
Member since:2005-07-06
Member since:2005-11-05
Actually, more people looking at the code means code needs to be written to a higher standard before it is released. It also means that bugs are likely to be fixed much more quickly than with a proprietary solution.
http://www.prnewswire.com/cgi-bin/stories.pl?ACCT=104&STORY=/www/st...
Member since:
2006-01-26
Member since:
2006-01-06
Member since:
2006-03-12
I'm surprised by the apathy to these patches. I'm amazed that anyone would say look at Vista and say "don't be mean" they are really trying with security.
Having looked at the profit Microsoft make each year, and their control of the OS market; Number of employees etc, Security is generally not good enough, and pointing to the next OS and saying thats the silver bullet is nonsence. Its not out till at least 2007.
The reality is that any comparison can be drawn to Linux or even OS X should be an embarassment to Microsoft.
The reality is the article in question contains nothing other than Microsoft fixed some serious vunerabilities, and they damn well should.
Its not a good indication of how effective they are at finding, fixing, or even quality of code, but then again judging by the comments here who would care.
Member since:
2005-08-10
Member since:2006-01-27
ahem,
These updates include an undocumented, secret method of snooping your hard disk to obtain list of MS and/or other installed software so that MS can shove its asset management software down your throat, force an enterprise agreement upon you, rape and pillage your company's bankroll, offer poorly coded products with endless patching and security updates and last but not least, fund the Bill and Melinda Gates foundation in order to further suppress Linux in developing countries.
Did I miss anything?
< and yes, i'm be facetious... >
Edited 2006-07-13 15:22
Member since:
2006-01-27
Oh, I am so glad that I actually test these patches before pushing them out. My XP desktop is now utterly useless. Start Menu and taskbar no longer work, can't connect to network resources, etc. etc. None of the articles on MS or Google corrected the problem. System Restore is useless too. Good luck fellas.
