Bonum Certa Men Certa

Eye on Security: 'F1' Keystrokes Made Safe Again, XP Unpatched, Goodbye to Vista, Vista 7 Flaw

Windows XP is sad



Summary: A big heap of security news from the past week, hopefully showing the really sad state of Windows

Patchfest



Microsoft Targets Media Flaws In April Patches

Another big Microsoft Patch Tuesday coming

Big Patch Tuesday On Way

Microsoft Schedules Major Patch Tuesday

It's likely that at least a few Microsoft employees had to work overtime in preparation for tomorrow's Patch Tuesday activities. The company's supposed to release 11 security bulletins in order to address 25 vulnerabilities, which may send signals about both its dedication to fixing stuff and the state of some popular software.


Microsoft to fix F1 bug

Microsoft plans to fix the 'F1' security bug that has been plaguing Internet Explorer users for six weeks in its monthly set of security patches tomorrow.


XP Neglect



MS kernel patch skirts infected machines (mentioned a few days ago)

Microsoft's latest batch of patches contains a kernel update designed not to install on machines infected with a rootkit.


Microsoft Tries to Avoid Windows Blue Screen Repeat (same here)

Microsoft Will Not Patch Newest XP Virus

Microsoft Advises Some XP Users to stay Unpatched (interesting headline, but not entirely accurate)

Vista Neglect



Microsoft slams coffin lid on Vista

Microsoft has killed support for its unloved Windows Vista operating system today.

The company announced in February that the service pack-free version of its post-XP, pre-Windows 7 OS would hit end of life support in April.

This means that from today, the OS which hit manufacturers in late 2006 is left entirely at the mercy of hackers who might wish to exploit the now unsupported code.


Windows Vista SP1 needed for support to continue

Microsoft Ends Original Vista Support

Microsoft ends support for original Windows Vista

Microsoft Ending Support For Windows Vista [Redmond Decides Not Worth It Support Non-Service Pack Vista, Although They Still Support XP]

Microsoft to end support for earlier Windows versions

End of the road for Windows Vista RTM

Microsoft To Stop Supporting Windows Vista RTM

No more support for Microsoft Windows Vista - so now what do you do?

Microsoft is now using fake numbers about Vista 7. These are fake for reasons we explained before (it was the same with Vista).

Vista 7 Spin



Microsoft to Patch Unhackable Windows 7 Bug (also here)

Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can't be exploited.

Of the 11 security bulletins that will be released in a few hours, "Bulletin 7" will address one or more vulnerabilities in Windows 2000, Windows XP and Windows Server 2003.


Worth seeing:



Zeus (Windows Spyware/Botnet)



Zeus spyware pretends to be Royal Mail PDF

Once infected, compromised machines 'phone home' to hacker controlled servers in China.


Zeus botnet exploits unpatched PDF flaw

Researchers find bugs in archive file formats

Most antivirus vendors have patched their applications in order to detect the tampered archive file formats, such as ".rar," and ".zip," said Tomislav Pericin, founder of the commercial software protection project RLPack.


New Malware



Hentai malware publishes web history of marks online

Some bogus files posing as games from Abel software attempt to trick victims into handing over personal information as part of a supposed game registration process. Meanwhile, in the background, the malware is collecting information on the victim's computer including domain, OS version, file use history and IE favourites.


Fake anti-virus scams on the rise, Google says

In a blog post previewing a 13-month study on the prevalence of fake AVs on the Web, Google said that more than 11,000 individual domains were involved in the distribution of these scams. According to Google, that figure accounts for roughly 15 percent of all malicious software on the Internet.


Conficker



China Reports Millions of Conficker Worm Infections (Conficker is good for GNU/Linux)

China had about 7 million Internet Protocol (IP) addresses infected with Conficker B at the end of last year, according to a recent annual security report posted on the Web site of China's National Computer Network Emergency Response Technical Team (CNCERT). The number of infections varied during the second half of the year, which the report covered, but was higher than 5 million during all but one week.


Recent Techrights' Posts

IRC Proceedings: Saturday, August 30, 2025
IRC logs for Saturday, August 30, 2025
Representing and Speaking for Animals
If I ever choose to take this matter to tribunal with animals-centric NGOs on my side, it'll get some press coverage for sure
The UEFI 9/11 - Part II - Campaign of Censorship and Defamation Against Critics
In dictatorships, humour serves an important role. It's tragic.
 
IBM Has Taken Control of GNOME
Don't expect a successor to be found any time soon
Links 31/08/2025: Google Gmail Data Breach and LF Puff Pieces for Pay
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
This is What Google News Has Become
Moments ago
The Slopfarm WebProNews Has Turned Google News Into a Laughing Stock Full of Plagiarism by Slop
If Google News dies of neglect, that's one thing. It's starting to seem like active neglect by Google is a form of participation.
Do What is Moral, as What's Legal Isn't Always Moral
Do what's objectively moral, no matter the costs and the risks
Slopwatch: Google News Assisting Plagiarism and Anti-Linux FUD, Serial Slopper Rips Off Linux-Centric Journalists
This makes the Web a much worse place and lessens the incentive to do journalism
Links 30/08/2025: NVIDIA Fakes Results to Hide a Bubble Already in Implosion Phase, Data Breaches Galore, Important Win for Workers' Union in Canada
Links for the day
In Kazakhstan, Yandex Estimated to be 20 Times Bigger Than Microsoft
Bing is measured as down this month
Shutterstock Not Enough? The Register MS Uses Slop Images in Articles (Seemingly More and More Over Time)
Cost-saving trajectory amid office shutdown?
Gemini Links 30/08/2025: Games, PostmarketOS, and Slop
Links for the day
Links 30/08/2025: Imgur Uproar and Many Ukraine Updates (Mediazona Reports Over 200,000 Russians Died for Putin)
Links for the day
How Not to Build Software
code forges that need a Web browser perhaps fill some 'niche' demand
GAFAM and "MATA"
The use of dark humour there hopefully helps illuminate what a lot of "modern" technology became like and how it interacts with human civilisation (to what ends and whose gain)
Birds Are Not "Pests and Vermin", Privacy is Not a Crime, and GNU/Linux is Not 'Hacking Platform'
I could not help but think of Free software analogies
The Sites Should Be Very Fast Again
That issue is now resolved
Flying in 2025
worse than ever before
Activists, Including Technical Activists, Need Not Pursue Affirmation
Techrights doesn't play or participate in a "popularity contest"
The UEFI 9/11 - Part III - Chaos is Scheduled to Happen Second Thursday of September (No Matter What the Microsofters Tell You)
The clock is ticking
Downplaying the Impact of "UEFI 9/11" is a Losing Strategy
we won't publish much whilst on holiday
Government Sites Should Run Free Software
Not proprietary bloatware with buzzwords
LLM Slopfarms Take No Breaks
When people run sites by bots they don't need to worry about "breaks"
GNOME Having a Meltdown Again
Thanks and farewell to Steven Deobald
Gemini Links 30/08/2025: Low Tech and Hunchbin 1.0.6
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, August 29, 2025
IRC logs for Friday, August 29, 2025
Financiers and Sponsors of the Slop Hype (Pyramid Scheme Waiting to End, Bubble That Will Inevitably Implode)
It's also burning the planet
Slopwatch: Fake Articles About "Linux", Google Helps Ponzi Schemes and Slopfarms in Google News
Slopfarms are a real pain
Gemini Links 29/08/2025: Retiring at 62 and URL Filtering HTTP(S) Proxy on Qubes OS
Links for the day
Links 29/08/2025: Lisa Cook Sues Convicted Felon and Backdoor Mandate in UK Resisted
Links for the day
Links 29/08/2025: Arti 1.5.0, War on Public Health (CDC), and Slop 'Bros' Made to Pay for Their Mass Plagiarism
Links for the day
No, 4Chan is Not Fighting for You by Lawyering Up Against Ofcom (UK)
Don't mistake proto-fascists for people who "fight for you". They don't.
In Many Places in the World Vista 11 "Market Share" is Going Down, Not Up
In some countries Windows is already down to third place or lower
More Microsoft-Connected Layoffs, at Least Third Time This Month! (Also Another Death on Campus)
Microsoft as a "gaming" company is where studios, projects, games, and even developers come to die
Slopwatch: Fake Articles About "Linux", Slop Images in VentureBeat, Linux Foundation Spam Made With LLM Slop and Slop Images
The only relief or upside - if any exists - is that the pace of slop was down a bit this week
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, August 28, 2025
IRC logs for Thursday, August 28, 2025
Gemini Links 29/08/2025: Poems, Games, and Java 25 Performance
Links for the day