EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

08.13.09

Vista 7 Vulnerable to Latest “Critical” Flaws

Posted in Deception, Marketing, Microsoft, Security, Vista, Vista 7, Windows at 7:43 am by Dr. Roy Schestowitz

Patches integrated quickly before RTM

Border

Summary: Microsoft uses a familiar stunt to pretend that Vista 7 is more secure and then makes a lot of noise about it

NOTHING will change when it comes to computer security once Vista 7 is finally released. We wrote about the subject in:

Using what Ryan has called a “sneaky” trick, Microsoft hid the fact that Vista 7 too was vulnerable to the latest bucket of "critical" patches.

In his own words: “There’s articles describing Windows 7 RTM as safe from the Patch Tuesday vulnerabilities that have been fixed in Vista and XP this month, but that’s why Microsoft made 7600.16385 the RTM, they integrated those patches right before they declared it final, then said it was safe from the bugs that affected XP and Vista. 7600.16384 was almost the RTM, but they made a new build just for these.”

“Microsoft hid the fact that Vista 7 too was vulnerable to the latest bucket of “critical” patches.”In short, he argues: “They applied all the patches, called that build the RTM, then said the RTM was unaffected. Then [they] released a press release patting Windows 7 on the back for being more secure, even though at least half those bugs affected it too. You wouldn’t notice this unless you had been following the Windows 7 build process pretty closely.

“Watch what happens on Patch Tuesday in September and October and see how many of those bugs affect Windows 7 cause they can’t declare RTM again.

“They’re still patching Windows XP after 8 years. What does that tell you? I fired it up on my other laptop yesterday and had 9 security updates waiting. Well, after 8 years and ~4,000 patches you’d expect them to have tied up most of the loose ends. They said Windows XP was secure when it launched and they are *still* patching it routinely.”

“Great talker, great liar.”

French Proverb

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

6 Comments

  1. aeshna23 said,

    August 13, 2009 at 9:50 am

    Gravatar

    I’m having trouble following this argument. Isn’t our argument that Linux has far few vulnerabilities than Windows, and not that any operating system is going to have zero vulnerabilities for quite a while?

    Roy Schestowitz Reply:

    I was pointing out Microsoft’s dishonesty. GNU/Linux does not play those PR games. It is upfront about deficiencies and there’s rarely a question about what’s good for shareholders; it’s about what’s good for users.

  2. Yuhong Bao said,

    August 13, 2009 at 12:12 pm

    Gravatar

    Well, all this means is that 7600.16384 is affected by these security bugs, but the real RTM, 7600.16385, is not. So MS is right in claiming that the RTM is not affected. Normal, I think.
    “Watch what happens on Patch Tuesday in September and October and see how many of those bugs affect Windows 7 cause they can’t declare RTM again.”
    Normal, I think, too. I remember the first patches released for XP RTM right on it’s launch on October 25:
    http://support.microsoft.com/kb/309521
    And not just for XP itself. Windows Movie Maker 1.1 and Windows Messenger 4.0 was shipped with XP, but by the time of the launch on October 25, Windows Movie Maker 1.2 and Windows Messenger 4.5 was already available.
    Here is a list:
    http://forums.windrivers.com/archive/index.php/t-39574.html
    http://news.cnet.com/2100-1001-274987.html

  3. Yuhong Bao said,

    August 13, 2009 at 12:36 pm

    Gravatar

    “Then [they] released a press release patting Windows 7 on the back for being more secure, even though at least half those bugs affected it too.”
    That is where the trick probably is.

  4. Yuhong Bao said,

    August 13, 2009 at 12:38 pm

    Gravatar

    “They’re still patching Windows XP after 8 years. What does that tell you? I fired it up on my other laptop yesterday and had 9 security updates waiting. Well, after 8 years and ~4,000 patches you’d expect them to have tied up most of the loose ends. They said Windows XP was secure when it launched and they are *still* patching it routinely.”
    That is I think normal too. Sometimes new features introduce new security holes, but this isn’t always the case.

    Roy Schestowitz Reply:

    Sometimes new features introduce new security holes, but this isn’t always the case.

    GNU/Linux receives many patches, but:

    1. Patches are distributed to all software from the repositories, not just the core O/S and core applications.
    2. GNU/Linux distributions are often released once or twice a year. If you look at LTS releases (over time), then your comparison becomes more valid.

    Windows XP hardly changes and the number of holes found in it so far is amazing. It was touted as very secure when it was released.

What Else is New


  1. USPTO Rewards Microsoft for Corruption at ISO by Teaching People Proprietary OOXML and Promoting Its Use

    The world's most important patent office promotes Microsoft lock-in, revealing not only corporate bias but also highlighting ways in which Microsoft crimes continue to pay off



  2. No, Startpage is Not Dutch Anymore

    Startpage is still clinging onto perceptions rather than truths; it means that Startpage isn't just betraying privacy but it's also dishonest and untrustworthy



  3. Understanding Thierry Breton: Chirac's Entrepreneurial “Joker”

    Minister in charge of the public treasury was not a career politician but an “entrepreneur” with a proven track-record as a financial wizard and “cost-killer”



  4. Links 16/11/2019: New Debian Release, Wine staging 4.20

    Links for the day



  5. IRC Proceedings: Friday, November 15, 2019

    IRC logs for Friday, November 15, 2019



  6. Microsoft Doesn't Love Linux, It Just Buys Linux

    Microsoft's takeover or abduction of its opposition's voice isn't an act of love but an act of occupation, a hostile colonisation that enables digital pillage and plunder



  7. Koch's Reply to EPO Through ILO and Techrights' Interpretation of Koch v EPO Documents Help Show That ILO-AT is Played by EPO Management

    Sending cases back and forth, without the complainant being involved, means that justice is in eternal ‘limbo’ and thus the abusive management of the European Patent Office (EPO) — first Team Battistelli and now Team Campinos — can get away with anything the bullies do (no judgment of substance being delivered)



  8. EPO Running ILO's Tribunal (ILO-AT) 'in a Loop' to Perpetually Delay and Drain the EPO's Complainants (Aggrieved Staff) Out of Money

    ILO’s Administrative Tribunal — a court for aggrieved EPO staff and other international organisations’ staff (usually known as ILO-AT for short) — is a major farce; when “time is money” and lawyers charge as much as 400 euros an hour the EPO’s management can exploit/misuse its cash reserves to also game justice and buy legal outcomes



  9. ILO is Not Functioning and ILO-AT Helps the Abusive Management of the European Patent Office

    It is becoming increasingly clear, based for example on Koch v EPO, that ILO-AT is where a lot of money will be spent on lawyers and rarely will that result in real justice (but it certainly helps EPO management pretend that staff has safeguards)



  10. Links 16/11/2019: Wine 4.20, Picolibc 1.1

    Links for the day



  11. Understanding Thierry Breton: Moral Responsibility for “a Capitalism That Kills”?

    "...France Télécom which had previously been defined by an ethos of public service, by egalitarian working conditions and by a sense of universal mission, had now been transformed into a "cash machine” whose sole purpose was to generate shareholder value on international financial markets."



  12. FOSSPatents Conference is Against FOSS, Promoting the FOSS-Hostile Construct Known as RAND or FRAND

    Do not be misled by the term Free/Open Source software (FOSS) in the name FOSSPatents and whatever relates to it (e.g. FOSSPatents Conference); it's not about FOSS but against FOSS, or pro-FRAND



  13. Europe is Under Attack

    European politicians or political candidates pretend to be 'candid'; but they're agents of Power, or put another way, they're there to make the rich and powerful class even richer and more powerful by passing new, ruinous laws in the name of 'the people' or 'for SMEs'



  14. Links 15/11/2019: New Opera and Brave, GNU/Linux Flatpa(c)ked

    Links for the day



  15. IRC Proceedings: Thursday, November 14, 2019

    IRC logs for Thursday, November 14, 2019



  16. Understanding Thierry Breton: Toxic Management Goes on Trial in France

    "In each of these cases, the suicide served as a symbolic act of protest to denounce workplace conditions at France Télécom and attract public attention to its practices."



  17. Thierry Breton's Video/Live Grilling is Over, But the Grilling Continues Online

    Elite politicians aren't reluctant to give Thierry Breton the high seat (or throne); but everyone else realises that this resembles a corporate takeover more than anything



  18. The EPO's Low Patent Quality is Not Just Suicidal; It is Illegal

    With help from the besieged Boards of Appeal (BoAs), which complain that they can no longer judge cases (appeals/referrals) autonomously and independently, the Office in Munich continues to grossly violate the EPC and mimic China's ridiculously low patent bar, which even formally permits patents on algorithms



  19. Links 14/11/2019: Mesa 19.2.4 and GCC 7.5 Released

    Links for the day



  20. Microsoft is Not an Open Source Company But Microsoft Bribed and Took Over Many Open Source Authorities (Rivals' Voice Hijacked)

    Free/Open Source software (FOSS) and GNU/Linux are being taken over by Microsoft moles, bought by Microsoft Corporation, and the collective voice of the alternative to Microsoft and Windows is being muzzled (they tell us they "love" us while they're attacking us and sometimes suing us)



  21. Techrights' Interpretation of Koch v EPO: The EPO's Management Still Attacks Staff Representatives

    The EPO hopes to get its victims (of EPO abuse) to not only foot their own bills but also the EPO's



  22. Understanding Thierry Breton: “Mister Cash” Arrives at France Télécom

    The psychological harassment of the France Télécom workforce led the "suicide wave" after Breton had left France Télécom



  23. The Breton-Battistelli Relationship and Breton Hiding His Employment Record at Rothschild & Cie Banque

    EPO scoundrels such as Battistelli are closer to Breton than most people care to realise; Breton is hiding part of his career ahead of today's grilling



  24. A Lot of EPO Staff on Dutch Land Protested (Despite Abusive Threats From Management) and a Strike is Reportedly Next

    EPO management in Rijswijk tried hard to prevent workers from protesting on their free time (lunch break), reaffirming that same old belief that nothing is changing at the EPO and nothing will change without truly disruptive action



  25. IRC Proceedings: Wednesday, November 13, 2019

    IRC logs for Wednesday, November 13, 2019



  26. Links 13/11/2019: Docker Enterprise Bought, WordPress 5.3, Qt 5.12.6 Released

    Links for the day



  27. Rebranding Malware and Spyware as 'Linux' to Dilute the Brand (and the News)

    Signal-to-noise ratio continues to be reduced, as a lot of "Linux" news has nothing to do with GNU/Linux or even with Free software



  28. Understanding Thierry Breton: In the Beginning...

    Career roundup of Thierry Breton, possibly the next EU Commissioner



  29. Startpage Has Been Delisted, But it Ought to be Blacklisted

    Startpage has just warned its fans (I am a former fan) of what Startpage itself covertly became months back



  30. IRC Proceedings: Tuesday, November 12, 2019

    IRC logs for Tuesday, November 12, 2019


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts