03.27.10

Vista 7 Cracked Again

Posted in Apple, Microsoft, Security, Vista, Vista 7, Windows at 4:41 am by Dr. Roy Schestowitz

Window

Summary: Windows security still broken, judging by Pwn2Own

WINDOWS is not doing terribly well. The margins are low and Microsoft relies on bundling alone (which requires a hardware buying spree). Looking at the past week’s news, there was one headline alone with “Vista” in it and just 5 clusters of headlines about “Windows 7″, 1 of which was a whitepaper.

Vista 7 is hardly mentioned these days, except for occasional complaints or PR fluff. Microsoft continues to improperly count “sales” and we have already explained how Microsoft fakes these to achieve an illusion of success. In many ways, Vista 7 is just Vista, but it looks a little different (notably the new deskbar). “Well the initial impression is how much it looks like Vista,” said Microsoft’s booster Jack Schofield about Vista 7, “Which I think is…uh…the thing I’m not supposed to say.”

In previous posts we showed that Vista 7 is considered worse when it come to security than its predecessor, Windows Vista. To name some posts on the subject:

According to IDG, “Hacker busts IE8 on Windows 7 in 2 minutes”

Two researchers yesterday won $10,000 each at the Pwn2Own hacking contest by bypassing important security measures of Windows 7.

Both Peter Vreugdenhil of the Netherlands and a German researcher who would only identify himself by the first name Nils found ways to disable DEP (data execution prevention) and ASLR (address space layout randomization), which are two of Windows 7′s most vaunted anti-exploit features. Each contestant faced down the fully-patched 64-bit version of Windows 7 and came out a winner.

“Hacker Bypasses Windows 7 Anti-Exploit Features In IE 8 Hack,” reports Dark Reading, a Web site which is focused on security issues.

A Dutch researcher won $10,000 in the Pwn2Own hacking contest this week for hacking Internet Explorer 8 on a Windows 7 machine — bypassing built-in anti-exploit features in the operating system.

From Microsoft sites comes a bit of spin and it’s worth noting that Apple’s proprietary products got cracked too.

Miller used one of the flaws he found by dumb fuzzing yesterday to exploit Safari on a MacBook Pro, walking off with the notebook, $10,000 and a free trip to Las Vegas this summer to the DefCon hacking conference.

Here is an interview with Miller and a summary from The Inquirer that says: “Apple and Microsoft get trashed by hackers again”

Some months ago we wrote about Microsoft entering Telstra [1, 2], so the following new item is also worth mentioning.

Telstra Corporation director of security services, Andy Solterback, has responded to claims by Microsoft that it has largely fixed security problems.

It is now being claimed the Internet attacks which are mostly caused by Windows zombies hit Seattle the most.

Seattle is top, according to the report, for cyberattacks and potential infections and online behaviour that can lead to cybercrime, like online shops, online banks and wi-fi.

It is rather interesting that Windows zombies go right back where they came from.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

This post is also available in Gemini over at:

gemini://gemini.techrights.org/2010/03/27/vista-7-cracked-at-pwn2own/

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. [Meme] Bundestagate Series Spoiler

    The chain of command/s at the EPO typically leads to major tragedy



  2. Breaking News: Campinos to Appear Before the Legals Affairs Committee of the European Parliament on Monday 12 April

    "Some MEPs have been briefed about ongoing governance deficits at the EPO, in particular the lack of GDPR compliance and the sell-out of "digital sovereignty" to Microsoft, but it remains to be seen whether or not they will dare to bring these issues up during the hearing."



  3. Pro-FSF Petition (“An Open Letter in Support of Richard Matthew Stallman Being Reinstated by the Free Software Foundation”) Tops 6,200 Signatures

    Monopolies and their media, along with their NGOs, have spoken and incited based on falsehoods; people now respond so the hate letter has a real crisis



  4. Links 10/4/2021: osbuild 28, KDE Frameworks 5.81.0

    Links for the day



  5. EPOLeaks on Misleading the Bundestag -- Part 12: A Worthy Successor to His Mentor?

    We examine the role of Christoph Ernst in EPO management, both in the Benoît Battistelli era and the António Campinos era (plenty to hide)



  6. USPTO for Monopolies, Keeping GNU/Linux in the Dark

    Growing evidence of gross discrimination against GNU/Linux (or Free software, even BSD/UNIX) users at the USPTO is too hard to ignore; some people out there challenge the Office over this travesty



  7. Accessibility and Availability First

    To make Techrights more widely accessible and more difficult to block/censor we've been making further changes, including self-hosting where possible



  8. Self-Hosting Videos With Free Formats and Animated Previews, Watermarks/Logos and Translucency

    We examine the power of video editing with ffmpeg, chained with command-line scripting and HTML5 features



  9. Links 10/4/2021: Linux on M1, Wine 6.6, ClamAV 0.103.2

    Links for the day



  10. Lunduke: On Mob Justice in the Tech Industry

    A new video from the former Microsofter who fears the phenomenon that’s adopted by companies like IBM



  11. IRC Proceedings: Friday, April 09, 2021

    IRC logs for Friday, April 09, 2021



  12. EPOLeaks on Misleading the Bundestag — Appendix (Benoît Battistelli's Vichy Syndrome): Georges Henri Léon Battistelli and Charles Robert Battistelli

    Local copies with evidence of or something concrete about Benoît Battistelli’s connection to unsavoury — and by today’s standards outright fascistic — politics



  13. IBM Doubles Down on Masters Being an Acceptable Word in the Context of Technology

    3 days after this post which disproves IBM's stance or shows its double standards it once again says “Masters” in its official blog (won’t that offend and alienate some people as they insist?)



  14. Hate Letter Against Richard Matthew Stallman (RMS) Backfired So Spectacularly That Signers Asked to Revoke Their Own Signatures and the List Was Then Frozen Permanently (Updated)

    "An open letter in support of Richard Matthew Stallman being reinstated by the Free Software Foundation" tops 6,100 signatures (graph generated just moments ago)



  15. EPOLeaks on Misleading the Bundestag -- Part 11: The BMJV's Tweedledee: Dr Christoph Ernst

    The right-hand man of António Campinos plays a role similar to that of Herr Lutz before him



  16. Links 9/4/2021: Tanglet 1.6.0 and HPVM 1.0

    Links for the day



  17. The Libel Against Richard Stallman Did Not Age Well

    Almost 2 years down the line libel about the founder of the FSF remains online, uncorrected (in sites funded by Microsoft and IBM)



  18. The Letter in Support of the FSF and Richard Stallman is Backed by the International Community, Not American Monopolies and Nationalistic Elements

    Free software is for everybody to use, internationally, it is not the asset of a bunch of current and old monopolists (connected to the US military) that also control the media; the nature of the signatures says that out loud



  19. Gemini Over IPFS (Decentralised Web, Accessed Over Gemini Protocol)

    The Gemini protocol (gemini://) can already be used to fetch (at the back end) and present objects from a P2P-like network; we're currently exploring practical use cases and possibilities



  20. News Sites That Talk About Patents Have Become Shameless Self-Promotion 'Plugs' by Law Firms (and Sometimes Outright 'Spam' for Litigation)

    The sources of news about patent affairs have dried up; sites that actually used to investigate and report facts have since then shut down or defected to the Public Relations/marketing industry



  21. Links 9/4/2021: Kubernetes 1.21 and FFmpeg 4.4 Released

    Links for the day



  22. IRC Proceedings: Thursday, April 08, 2021

    IRC logs for Thursday, April 08, 2021



  23. [Meme] Self-styled Judges

    To suit a recurring theme at the EPO we hereby present Roland Lutz, a self-styled judge



  24. EPOLeaks on Misleading the Bundestag -- Part 10: A Faithful Lapdog Despised and Reviled by EPO Staff

    "In any event, the "Nazi" jibes directed against Lutz seem to have triggered Battistelli who decided to take revenge on his perceived enemies inside the EPO by smearing them as “Nazis”."



  25. Links 8/4/2021: GnuPG 2.3.0, Xen 4.15, Xfdashboard 0.9.2

    Links for the day



  26. The Hate Letter Which Backfired

    The FSF is more closely aligned with its founder's vision, his antagonists have left or are leaving, and that old hate letter turned out to be a loud minority (made to appear louder by biased media) emboldened by a gish gallop of lies



  27. IRC Proceedings: Wednesday, April 07, 2021

    IRC logs for Wednesday, April 07, 2021



  28. IBM: We Can Say It... You Cannot

    Blog posts such as this new one help show the hypocrisy or the double standards of IBM, looking to control speech while attacking people's (software) freedom/civil liberties and profiting from atomic bombs



  29. The Collapse of Microsoft Windows

    Although the corporate media keeps insisting that Microsoft is doing well, government (or military) bailouts keep the company afloat while its desperate attempts to remain relevant (as the common carrier languishes) merit a debate



  30. Links 8/4/2021: Mesa 21.0.2, GNU Releases, and Stable Kernels

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts