EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

03.08.10

Apache Shows Why GNU/Linux is Safer Than Microsoft Windows; Microsoft Makes Batteries Dangerous

Posted in Free/Libre Software, GNU/Linux, Microsoft, Security, Windows at 12:41 pm by Dr. Roy Schestowitz

Battery charger

Summary: Windows shows that it not only brings security problems to Apache but also to battery chargers

THE thing about Windows is, the underlying operating system is less secure than UNIX and Linux. Here is nice new proof of this, straight from the news. Our reader renamed it (the headline) “Windows bug prompts Apache update advice”

“The vulnerability means that you can take complete control of the web server remotely with system privileges — which is the highest privilege on Windows,” Edelstein told ZDNet.com.au. “An attacker could gain access to, modify and take away data.”

Edelstein advised users running Apache on Windows platforms to upgrade immediately as users have no way of knowing if their web servers have been compromised. The company’s security advisory can be accessed here.

[...]

“A proof of concept remote exploit has been written by Sense of Security, and it is feasible that others could write a similar exploit to completely compromise a Windows system,” said Brett Gervasoni.

As most Apache users run it on UNIX and Linux, the above is probably nothing to panic or worry about.

Charged With Malware

“Microsoft, the company that made battery chargers dangerous,” called it the reader who sent this next item from the news:

The United States Computer Emergency Response Team (US-CERT) has warned that the software included in the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access.

In an advisory, the US-CERT warned that he installer for the Energizer DUO software places the file UsbCharger.dll in the application’s directory and Arucer.dll in the Windows system32 directory.

When the Energizer UsbCharger software executes, it utilizes the UsbCharger.dll component for providing USB communication capabilities. UsbCharger.dll executes Arucer.dll via the Windows rundll32.exe mechanism, and it also configures Arucer.dll to execute automatically when Windows starts by creating an entry in the HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run registry key.

“The danger of Open Source software is that you don’t know if it contains malware,” jokingly said our reader.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

3 Comments

  1. your_friend said,

    March 8, 2010 at 9:55 pm

    Gravatar

    Ha ha, it went undetected for three years. The Windows version of that Energizer Bunny has been pulled from the market.

    Regardless of when it was created, its discovery prompted Energizer to announce March 5 that it was discontinuing the sale of the product and removing the site from which the software could be downloaded. In addition, the company is urging consumers who downloaded the Windows version of the software to uninstall it.

    It’s amazing how popular the wipe and reload becomes when Microsoft needs to sell a new version of Windows. Thanks for all the nice links.

  2. Needs Sunlight said,

    March 9, 2010 at 5:53 am

    Gravatar

    @your_friend : it did not go undetected for three years, Microsoft did not publicly acknowledge it for three years, or more. There is a lot of difference there.

    Wipe and reload becomes popular when Microsoft needs to sell new versions of Windows or when third party packages, of any kind, become too popular. Wipe and reload ensures that the 3rd party packages are knocked down at least a couple points in marketshare. It is to Microsoft’s advantage that they are so many decades behind Linux, OS X or even Solaris in regards to package management.

  3. uberVU - social comments said,

    March 11, 2010 at 5:51 pm

    Social comments and analytics for this post…

    This post was mentioned on Identica by schestowitz: #Apache Shows Why #GNU #Linux is Safer Than #Microsoft #Windows http://boycottnovell.com/2010/03/08/battery-chargers-and-malware/

What Else is New


  1. Short Report From Today's EPO Protest in Munich

    A few noteworthy points about the staff protest which coincided with the Administrative Council's meeting earlier today in Munich



  2. Growing Consensus Even Among Patent Professionals That UPC is Dying Everywhere If Not Just in the UK

    The UPC continues to sink as more and more people come to grips with the complexity of the current situation, irrespective of what countries other than the UK do next



  3. Battistelli Attacks Not Only His Staff But Also Patents Themselves (Their Quality) and the Legal Legitimacy Surrounding the EPO

    Battistelli's EPO is having not only reputation problems but also staff retention problems, patent quality problems and problems pertaining to perception of fair trials or justice regarding patents



  4. Battistelli is Creating an Atmosphere of Terror at the EPO While Exploiting Terror Attacks to Garner Sympathy

    "As if Laurent were a terrorist, the Office has imposed a house arrest and has forbidden him to enter the EPO premises," according to SUEPO, writing about one of its members at The Hague who is "maliciously accused via a fabricated procedure"



  5. Rumours That EPO President Battistelli Got Sacked to be Replaced by Christoph Ernst Appear to be Baseless

    Dr. Christoph Ernst is claimed to be the successor (interim or permanent) of the notorious Battistelli, but these claims have little or no evidence to support them



  6. Links 29/6/2016: SteamOS 2.83 Beta, Alpine Linux 3.4.1

    Links for the day



  7. The EPO Has Become Battistelli's Circus and the Administrative Council Has Been Reduced to (Illegal) Circus Animals Controlled With 'Treats'

    Battistelli's attack on justice and on the rule of law is debated among insiders who have grown increasingly impatient with the Administrative Council's tolerance of Battistelli and sometimes even Kongstad's amazing complicity



  8. The Latest Lies About the Unitary Patent (UPC) Would Have Us Believe That It's Alive and Well

    How patents-centric sites (some of which are in bed with the EPO) have responded to the 'Brexit' vote and why they're not telling us the truth about the Unitary Patent scam (often created and promoted by the same people who run and/or fund such sites)



  9. EPO Management Bunker: “The Bailiff Who Came to Deliver the Subpoena was Escorted off the Property by Five Security Guards.”

    Battistelli has essentially turned the European Patent Office (EPO) into a barracks, where he continues to enjoy immunity from the rule of law and discourages those who wish to challenge this immunity



  10. Keeping the Guard and Securing Society From Software Patents

    The policies over which Indians and Europeans have kept guard are being 'stolen' by vested interests



  11. Benoît Battistelli Further Weaponises His EPO 'Stasi' With CA/52/16

    A glimpse at what Benoît Battistelli will shortly attempt to do to the EPO, in order to cement his power in the face of growing opposition from many directions



  12. EPO Caricature: Administrative Council Control of Benoît Battistelli

    Another new caricature regarding the President of the European Patent Office (EPO) and lack of effective oversight from the Administrative Council (European Patent Organisation)



  13. EPO Caricature: Firing Benoît Battistelli

    The latest caricature regarding the President of the European Patent Office (EPO)



  14. Links 28/6/2016: Red Hat Summit 2016, Hadoop Events

    Links for the day



  15. Today's Media Coverage Says Microsoft Loves Linux, But Today Microsoft Extorted Linux Using Software Patents Again

    Luna Mobile has just been extorted by Microsoft (using dubious software patents, as usual) for using Android/Linux, but Microsoft-influenced media carries on spreading the lie that "Microsoft loves Linux"



  16. New Efforts to Work Around Barriers to UPC in Light of 'Brexit'; Behind These Efforts Are Self-Serving Patent Profiteers

    look at who's trying to work around the latest barriers to the widely-unwanted (by the public) Unitary Patent regime and what is being planned behind the scenes, or behind closed doors (by and for those who stand to profit from the Unitary Patent regime)



  17. Injunction Against Battistelli's Investigative Unit (Known Internally as 'Gestapo') Amid Serious Injustices and Bogus 'Trials'

    SUEPO, the EPO's staff union, steps up its spiel in a case against the "European Patent Organization" as defendant and "SUEPO/VEOB" (Trade Union of the European Patent Office) as claimants



  18. [ES] Con la UPC Muerta por el Resto del Termino de Battistelli, No Hay Razón para que la EPO o el Consejo Administrativo Sigan Manteniéndolo Más

    Pensamientos acerca de lo que pasará al líderazgo de la EPO después de ‘Brexit’ (salida Británica de la EU), lo que sevéramente socava el proyecto más grande de Battistelli el que usaba habituálmente para justificar sus increíbles abusos



  19. [ES] El Caradura Benoît Battistelli Debería Renunciar a Luz de la Filtrada Nueva Decisión en Su Vendeta en Contra de un Juez que se Atrevió a Decir la Verdad (Actualizado)

    Benoît Battistelli continúa quebrando las propias reglas de la EPO, no sólo las leyes naciónales, como una nueva decisión ayuda a revelar



  20. [ES] Cada Vez Más Parece Que Battistelli está Escondiéndo ‘Evidencia’ Falsa y/o Ilegalmente Obtenda de la Unidad Investigativa de la EPO

    El porqué creemos que Benoît Battistelli está cada vez mas desesperado de esconder operaciónes ilícitas de reunir ´evidencia´ lo que eventuálment lo puso a él mismo — no al acusado — en una situación catastrófica situacion que lo puede forzar (esperamos) a us renuncia



  21. Links 28/6/2016: Vista 10 Updategate, OpenMandriva 3.0 Beta 2

    Links for the day



  22. Links 27/6/2016: Linux 4.7 RC 5, OpenMandriva Lx 3.0 Beta 2

    Links for the day



  23. From Alleged Organised Crime to Vice-President of the European Patent Office (EPO)

    Željko Topić's situation in Croatia illuminated by means of recent documents from the authorities



  24. Battistelli May Still be on the Way Out as Pressure Grows in Germany, UPC in Shambles

    Pressure on Battistelli is growing even from within circles that are traditionally protective of him and a long letter is sent to Dr. Christoph Ernst, who some believe will replace Battistelli



  25. Caricature: European Patent Office (EPO) Under Battistelli

    The latest caricature about the state of the European Patent Office (EPO)



  26. Techrights (Almost) at 10: From Software Patents to Novell and to Present Focus on EPO

    A short story about how and why we ended up writing so much about the European Patent Office (EPO) and the impact beyond Europe



  27. Patents Roundup: Bad Quality (USPTO), Bad Analysis (India), Bad Microsoft, Bad Actors (Trolls), Bad Scope (Software Patents), and the Ugly

    A mishmash of news about patents, mostly regarding the United States, and what can be deduced at the moment



  28. Links 26/6/2016: IceCat 38.8.0, Wine 1.9.13

    Links for the day



  29. With UPC Dead for Battistelli's Entire Remaining Term, No Reason for the EPO or the Administrative Council to Keep Battistelli Around

    Thoughts about what happens to the EPO's leadership after 'Brexit' (British exit from the EU), which severely undermines Battistelli's biggest project that he habitually used to justify his incredible abuses



  30. Links 24/6/2016: Xen Project 4.7, Cinnamon 3.0.6

    Links for the day


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts