Post a Comment
The French government has also made a similar recommendation:
http://www.lemonde.fr/technologies/article/2010/01/17/la-france-et-...
Exploit code is now available:
http://www.darkreading.com/vulnerability_management/security/attack...
RE[2]: Comment by Chris Nillissen
Naturally the German Government, and others, suddenly realized what we all know for years.
The funny part is Microsoft "rejected the warning" that is directed to all public offices, in the fastest way to reach them.
It would be even funnier to see Microsoft to sue the German government for disclosing an internal note in a public way and thus creating an image loss to Microsoft (accountable) even if under conditions created by Microsoft".
Isn't that the basis of many (heavy contenders) "law" suits?
We also know the answer is both yes, no and maybe.
But is nonetheless funny how the even Governments notes are rejected just because they WILL be listened by the average user.
Delicious!
Edited 2010-01-18 02:09 UTC
No. Governments don't realize things. They don't realize anything. That's not their nature. :-)
Furthermore, not using insecure and outdated PC software products will make it very hard for the upcoming "Bundestrojaner" (translated: "Federal Trojan") to become available on all PCs in the FRG so the government can easily spy on the people. :-)
This is just a friendly advice. Just imagine if all the administrative offices on federal, state, community and municipal level would stop using "Internet Explorer". All their fine and expensively taylored applications would stop working! :-)
Listen: Yes. Believe: No. :-)
https://www.bsi.bund.de/cln_183/ContentBSI/presse/Pressemitteilungen...
(you need to know german)
If you use a web browser released in 2001, you get what you bargained for.
Same goes to any other browser. To balance the sheets: Firefox 1.1 was released in 2005!
EDIT: okay, my apologies, after some digging I realized that other versions were affected too (though Metasploit only released an exploit for IE6).
Good advice from the the Register interview too:
We've said it before, and given the particulars of this vulnerability, we'll say it again: security measures like DEP and ASLR, or address space layout randomization, matter. As ugly as this vulnerability is - to say nothing of its ability to remain undetected for nine years - the fact that Windows 7 and IE 8 were able to withstand the "highly sophisticated" attacks that felled Google is testament that Microsoft is making significant progress.
Edited 2010-01-18 09:00 UTC
http://en.wikipedia.org/wiki/Links_(web_browser) has very little.


