01.01.09

Cybercrime Rises and Vista 7 is Already Open to Hijackers

Posted in Microsoft, Security, Vista 7, Windows at 3:10 pm by Dr. Roy Schestowitz

No fixes available

Number 7

AN INTERESTING YEAR — not in the good sense by any means — lies ahead of many. As more people are under financial pressure, crime is likely to soar and it already does, according to news reports. The BBC warns about the effects of the recession/depression on cybercrime.

With the economic downturn affecting every corner of the globe, it is perhaps no surprise that it is likely to affect hi-tech criminals over the next 12 months.

Now more than ever it is crucial to ensure that systems are highly secure. Break-in attempts will most likely rise, so defenses must too (or else).

As we mentioned back in October, Vista 7 [sic] was given to particular people with critical flaws in it. It was inherently hijack-capable (or hijack-ready) and there were no patches available to fix this. Here is a new short report about the very same problem, which relates to the latest build.

Leaked Windows 7 Beta Includes Free Security Holes

[...]

Turns out that it’s impossible to apply security updates to the bootleg version, including the recent “out of band” update for a seriously critical vulnerability in Internet Explorer.

It’s worth emphasising that Microsoft has said absolutely nothing about security improvements in Vista 7, despite the fact that Windows Vista is a security failure and all Microsoft can do is bother journalists over their exposure of this problem. Since Vista 7 is just Vista with a mild facelift, it will be as insecure as Vista.

“Our products just aren’t engineered for security.”

Brian Valentine, Microsoft executive

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

8 Comments

  1. Diamond Wakizashi said,

    January 1, 2009 at 7:27 pm

    Gravatar

    I wish Microshit and it’s bitch Novell a horrible new year!

  2. David Gerard said,

    January 2, 2009 at 10:47 am

    Gravatar

    It is true that Vista is better than XP. But that’s saying so little …

  3. Roy Schestowitz said,

    January 2, 2009 at 10:48 am

    Gravatar

    In terms of security?

  4. Roy Bixler said,

    January 2, 2009 at 11:02 am

    Gravatar

    It is true that Vista is better than XP. But that’s saying so little …

    My understanding is that it’s a mixed bag and that there are a significant number of users that have problems with Vista and prefer to use XP instead. Admittedly, I’m not a Windows user but an anecdote I’ve heard recently from my brother-in-law who is a Windows user is that he has a friend who recently bought a laptop which runs Vista. It has 3 Gig. RAM and still skips when playing videos. He is not keen to “upgrade” to Vista and instead considers that it may be time to buy a Mac.

  5. David Gerard said,

    January 3, 2009 at 3:39 pm

    Gravatar

    Vista is fat as hell. Mind you, KDE4 is also fat as hell – I’ve been experimenting with XP in a VirtualBox lately, and was somewhat disconcerted to find that Firefox 3 in XP in a VM assigned 384MB was more responsive than Firefox 3 in the native Kubuntu installation using the 1GB installed …

    I have nothing against using lots of memory and CPU to give people a good user experience – KDE4 is fat, Mac OS X is fat, GNOME is fat, for this reason. I do have something against using lots of memory and CPU to fail to inflict DRM on everyone …

  6. Roy Schestowitz said,

    January 3, 2009 at 3:42 pm

    Gravatar

    That may be true, but you can get Linux 2.6.27 without all that ‘fat’ (lightweight distros are on ‘the menu’). You can hardly achieve this with other operating systems that adhere to the one-size-fits-all approach.

  7. David Gerard said,

    January 3, 2009 at 3:49 pm

    Gravatar

    Oh yeah. If I wanted responsiveness I’d go back to KDE 3.59. But KDE 4.1 is so niiiiiice.

    Here’s to software freedom!

  8. Roy Schestowitz said,

    January 3, 2009 at 3:59 pm

    Gravatar

    Have a look at LXDE.

What Else is New


  1. Microsoft Loves Linux and Android Apps Running on Windows Instead of GNU/Linux and Android Devices

    Microsoft loves Linux, they say; but as Microsoft's former VP James Allchin put it: "If you're going to kill someone there isn't much reason to get all worked up about it and angry -- you just pull the trigger [...] We need to smile at Novell while we pull the trigger."



  2. Links 28/11/2020: RenderDoc 1.11, GNOME 40 Scrolling Horizontally

    Links for the day



  3. Nine Documents About the Financial Siege Against EPO Staff (Past, Present, and Future)

    Today we release dozens of pages of letters and documents (internal to Europe's second-largest institution); they all focus on the betrayal and skulduggery, crushing staff in spite of what was originally promised (and what workers actually signed up for)



  4. EPO Senior Management (Cabal) “Essentially Deaf to the Proposals From Staff Representatives.”

    Representatives of EPO staff feel like the management of the EPO is "deaf" and uncaring; there's hardly any meaningful progress (or none whatsoever) when it comes to truly honest dialogue with real participation



  5. EPO Management, Led by António Campinos, Attempted to Stifle or Prevent Staff From Being Surveyed

    Battistelli's cabal, which covers up a lot of fraud and corruption, is attempting to prevent the staff from expressing an opinion (for insiders and perhaps outsiders to assess) because things are really bad and autocratic measures are seen as necessary to keep the lid on issues/abuses



  6. The European Patent Office's Central Staff Committee: Office Cannot Recruit Fit-for-Purpose Patent Examiners Anymore

    One third of EPO recruits are 'locals' (Germans), 0.2% are Swiss, 1% Scandinavian; the EPO as an employer became unattractive and it's unable to attract the staff it needs (as was projected and planned when the EPC was agreed upon)



  7. IRC Proceedings: Friday, November 27, 2020

    IRC logs for Friday, November 27, 2020



  8. Links 27/11/2020: Jolla is 7, Diffoscope 162, MNT Reform Production

    Links for the day



  9. The Time Coronavirus Helped EPO Management Prevent Staff From Protesting and Going on Strike (March 26th)

    "In view of the spreading of the New Corona Virus, the planned General Assemblies have to be cancelled," the Staff Union of the European Patent Office (SUEPO) wrote in the wake of the crisis across Europe back in March (weeks ahead of a planned strike)



  10. Guarding Your Privacy With E2EE: Primer

    "As with all security, there is assumed risk no matter how careful you are. There are no security guarantees but that doesn't mean you shouldn't try."



  11. Links 27/11/2020: Systemd 247 and Cockpit 233

    Links for the day



  12. A Free Speech Deficit Harms Software Freedom

    Free software and Software Freedom cannot possibly succeed if we keep accepting or even just tolerating systematic censorship of opinionated people in our community; failing to speak out on this matter (for fear of supposedly offending someone, risking expulsion) is part of the problem — complicity by passivity



  13. Perception of Difficulty

    New poem by figosdev



  14. IRC Proceedings: Thursday, November 26, 2020

    IRC logs for Thursday, November 26, 2020



  15. Cartoon: After Gambling With Workers' Savings the EPO Can Do Real Estate

    New EPO cartoon from EPO insiders (the one on the right certainly looks a lot like António Campinos and the one on the left can be his EUIPO ‘import’ or Benoît Battistelli‘s INPI ‘import’)



  16. Free as in Freedom Should Not be Associated With Cost

    It's important to remind people that so-called 'free' services (Clown Computing, centralised spaces that 'farm' their so-called 'users') aren't really free; we need to advocate freedom or free-as-in-freedom alternatives



  17. [Meme] UPC's Pyrrhic Victory

    Contrary to what Team UPC says, what happened earlier today is hardly a breakthrough



  18. Many Thanks to Free Software, the Demise of Software Patents (in Europe and the US), and So Much More

    On a positive note we're heading into the end of November, one month before Boxing Day; we take stock of patent affairs that impact software developers



  19. Links 26/11/2020: PHP 8.0, Proxmox VE 6.3, UNIGINE 2.13

    Links for the day



  20. 29,000 Blog Posts and Recent Site Improvements

    Over 29,000 blog posts have been posted here, but more importantly we've made the site a lot more robust and resilient, accessible in more formats and protocols (while improving transparency, too)



  21. [Meme] Trump is Out. Now It's Time to Pressure the Biden Administration/Transition Team on Software Freedom Issues.

    The Biden transition is in motion and tentative appointments are underway, based on news reports (see our Daily Links); now is the time to put pressure, e.g. in the form of public backlash, to ensure it's not just another corporate presidency



  22. Boycott ZDNet Unless You Fancy Being Lied to

    ZDNet's Catalin Cimpanu continues to lead the way with misinformation and lies, basically doing whatever he was doing to land that job at ZDNet (after he had done the same elsewhere)



  23. The UPC and Unitary Patent Song

    On goes the UPC symphony, as the Unified Patent Court (UPC) is almost here, always coming "real soon!"



  24. Open Letter to the German Greens on UPC and Software Patents: Don’t Betray Your Voters and Your Promises, or You Will Regret it

    Dear Members of the German Greens in the Bundestag. By Benjamin HENRION.



  25. [Meme] One Step Away From Replacing Patent Examiners With 'Hey Hi' (AI)

    If it's not legal for 'Hey Hi' (AI) to get a patent, why should it be legal for patents to be granted by those who are invisible (and sometimes in de facto house arrest)?



  26. European Patent Office (EPO) Reduced to 'Justice Over the Telephone' and Decree by E-mail

    The EPO is trashing the EPC and everything that the Office was supposed to stand for, as it wrongly assumes demand for monopolies (typically from foreign corporations) comes before the rule of law and Europe's public interest



  27. Making Free Software Work for Users

    The latest reply to a non-developer concerned about software freedom; guest post by figosdev



  28. IRC Proceedings: Wednesday, November 25, 2020

    IRC logs for Wednesday, November 25, 2020



  29. Links 26/11/2020: AV Linux 2020.11.23 and Blender 2.91 Release

    Links for the day



  30. Links 25/11/2020: GamerOS and Biden Transition in Motion

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts