Linked by Amjith Ramanujam on Mon 11th Aug 2008 16:13 UTC, submitted by gonzo
Privacy, Security, Encryption Ars Technica has analyzed recently publicized Vista's security flaws. "Unfortunate, yes, but not as was reported in the immediate aftermath of the presentation evidence that Vista's security is useless, nor does this work constitute a major security issue. And it's not game over, either. Sensationalism sells, and there's no news like bad news, but sometimes particularly when covering security issues, it would be nice to see accuracy and level-headedness instead. ... Furthermore, these attacks are specifically on the buffer overflow protections; they do not circumvent the IE Protected Mode sandbox, nor Vista's (in)famous UAC restrictions."
Permalink for comment 326524
To read all comments associated with this story, please click here.
RE: Comment by Soulbender
by Bounty on Mon 11th Aug 2008 17:44 UTC in reply to "Comment by Soulbender"
Bounty
Member since:
2006-09-18

"it's not really game over "

So then he wasn't ironic. You agree with him. He wasn't understating then. Anything short of 'game over' is SSDD. We would need a kickass exploit turned wurm ASAP to get anything out of this... and since XP doesn't have buffer overrun protection anyways, if 0Day of that caliber already existed it would be out there. Or have hackers really been waiting for DEP to be circumvented before they release exploits? So they can maybe someday hit that extra 15% marketshare?

FAIL

Reply Parent Bookmark Score: -1