EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

08.01.10

Security Emergency at Microsoft, All Windows Users Are Vulnerable for Now

Posted in Microsoft, Security, Windows at 4:30 pm by Dr. Roy Schestowitz

Windows users can cut the Internet cable to feel more secure

Cutting

Summary: Every version of Windows is open to attack which has already targeted very many users and no patches are available yet

MICROSOFT HAD MANY security issues last month. We covered many of them over the course of the past fortnight, but here are some newer items and items which we missed.

Some while ago Microsoft discovered a very major zero-day flaw, which made a lot of headlines including this one where Microsoft is shown to be confirming the problem.

Microsoft on Friday warned that attackers are exploiting a critical unpatched Windows vulnerability using infected USB flash drives.

“Microsoft Acknowledges Windows Shell Vulnerability,” says another article from around the same time. “Microsoft Warns Of Attacks Exploiting Windows Shell Flaw,” alerts CRN. This is an emergency which, according to OpenBytes begs for a vulnerability patch on Monday. For how many consecutive months must such embarrassments happen? Also in the news:

According to this new report, Microsoft’s bad patches, which even Microsoft partners are scared to apply, leave many Windows installations unpatched and thus totally vulnerable on a permanent basis. Microsoft pulls support (as in security patches) for older versions of Windows (Windows 2000 and soon Windows Server 2003) and since upgrades are not free when it comes to Windows, more people are expected to have vulnerable machines. To Microsoft, it’s just a business decision. When it comes to Windows 2000, Microsoft has neglected it security-wise longer than it's legally allowed.

“When it comes to Windows 2000, Microsoft has neglected it security-wise longer than it’s legally allowed.”Microsoft is largely a PR company, so needless to say it has ways of downlplaying the severity of such issues, which may have made one in two Windows PCs a zombie PC (since 2008).

As evidence of Microsoft’s PR crusade, look no further than the latest Microsoft Imagine Cup rubbish [1, 2, 3, 4, 5]. It’s Microsoft advertising and it’s a way of making the monopolist look like it is loved by children. It’s an attempt to change the company’s image and similar stunts currently come from Microsoft Malaysia. But that’s another story for another day. The point we are trying to make here is that no matter how serious Microsoft’s security problems are, it will always do lots of PR work to silence reporters. We have documented cases where Microsoft unleashes PR people at journalists (regarding Vista security) and in last month’s news we found “Irvine PR firm honored for work related to Microsoft patches”. Watch the body of this article:

Madison Alexander was honored for the agency’s work on behalf of its client, Shavlik Technologies. By consistently positioning Shavlik as an expert on Patch Tuesdays – when Microsoft Corp. releases software security updates once a month on a Tuesday – the firm delivered “prominent references” to Shavlik in media coverage of Patch Tuesdays, according a statement from Madison Alexander.

Juniper, which is run by several Microsoft executives, seem to be trying something similar with occasional press releases that are consistent with the same template.

“Microsoft’s security problems are not helped by disgruntled groups whom Microsoft is pushing to behave as they do”This just shows how ‘independent’ the press really is and why. It’s all distorted by PR, but the PR happens behind the scenes (the back end, so to speak). “atom42 Tops Agency Leaderboard in Microsoft Competition,” says the headline of this new press release. “In a recent competition run by Microsoft to promote recently improved ‘decision engine’ Bing, online marketing agency atom42 outperformed larger rivals to win ‘blingin’ prizes.” Awww… wonderful!

Microsoft’s security problems are not helped by disgruntled groups whom Microsoft is pushing to behave as they do [1, 2]. It is only making things worse because they take revenge and put all Windows users at risk. This is where Microsoft’s attitudinal problem (arrogance and power games [1, 2, 3]) contributes to lack of security in its products. Some security experts are even leaving Microsoft. New example:

Security researcher and former Microsoft gadfly Marc Maiffret has returned to the company he started when he was a teenager, eEye Digital Security.

Until Microsoft’s emergency security patch arrives everyone who uses Windows is at risk of being assembled into a botnet, “Experts predict extensive attacks of Windows zero-day,” says this report, noting that “Security organizations… raised Internet threat levels to warn users that they expect widespread attacks using exploits of a just-acknowledged critical bug in all versions of Windows.”

That’s right, all versions are affected, Vista 7 included. A while ago Microsoft said that 25,000 PCs were attacked with the latest Windows zero-day flaw (the number is now higher) and it investigated issues it could prevent by simply changing its internal culture.

“Fuck! It took you a year to figure that out!”

Bill Gates

“That’s the dumbest fucking idea I’ve heard since I’ve been at Microsoft.”

Bill Gates

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email
  • Google Bookmarks

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Links 12/7/2020: KDE Plasma 5.20 Preview and Elive 3.8.14 Beta

    Links for the day



  2. [Humour] The 'Orange One' Does Not Respect Judges Either

    More than two years after taking over the European Patent Office (EPO) António Campinos has done absolutely nothing to restore judicial independence of the Boards of Appeal of the EPO



  3. The Systemd Song

    Speak out about IBM's strategy before we're all using GNU/Linux distros 'barcoded' with systemd



  4. Monopoly (or Vendor Lock-in) is Not Modularity

    IBM cannot totally control the kernel, Linux; IBM's control over GNU/Linux may be worth even more than what it paid for Red Hat as that's the key to overpriced support contracts and the general direction of development (important trends such as file systems and various low-level stacks)



  5. The Internet Archive Doesn't Forget, Whereas the Internet and the Web Forget Very Fast

    World Wide Web history is grossly undervalued and preservation of such history (e.g. by the Wayback Machine) is taken for granted by far too many people; the robber barons of today benefit the most from erosion of collective memory as they get to rewrite the past to suit their present and future interests



  6. Environmentalism and Free Software Can be Viewed as Closely Connected and Help One Another

    Modest lifestyles are an overlapping pattern in the Free software community and green activists; there's room for alliances and collaboration, bettering society by reducing consumption and discouraging voyeurism



  7. Free (as in Freedom) Software + Social Control Media ≠ Free Speech

    Speaking through middlemen and private platforms is bad enough (that gives others unjust power over speech); to claim that because the underlying platform is free/libre software it therefore becomes a non-issue is also dishonest



  8. António Campinos: President or Quasi-Autocratic Corporate Puppet?

    The culture of oppression — and censorship of evidence of oppression — is what today’s EPO is all about; the EPO learned how to better avoid (or block) negative publicity without actually changing its ways; and due to unprecedented speech restrictions you won’t hear that from SUEPO



  9. The Media Continues to Ignore Corruption of António Campinos

    António Campinos has Croatian scandals on his lap; the obedient media, however, refuses to even talk about it (or uses COVID as an excuse to write nothing on the subject, as some journalists have told us)



  10. A Call for Patent Sanity

    The public's call for reform is motivated by improved understanding of today's debased patent system and how out-of-order (detached from its original mission statement) it has gotten; patent maximalism, if it does not completely unravel this whole system, severely discredits it



  11. Declassified US Army Field Manuals Explain Microsoft's Public Relations Strategy (Similar to Selling Imperialism to the Occupied)

    The misuse of public broadcast to brainwash the public is well understood and thoroughly exploited by both Microsoft and the Gates Foundation (which sells this ridiculous lie that the world’s richest people speak for and fight for the poorest, i.e. those impoverished by endless greed)



  12. IRC Proceedings: Friday, July 10, 2020

    IRC logs for Friday, July 10, 2020



  13. Links 11/7/2020: Slackel 7.3 Openbox, Kiwi TCMS 8.5, Librem 5 Dogwood Update 3

    Links for the day



  14. Education Without Free Software is Training or Indoctrination

    Kids need to decide for themselves what they want to do and what they wish to use when they grow up; schools need to provide general tools and the mental capacity to make good decisions (rather than make these decisions for the kids, sometimes at the behest of foreign monopolists)



  15. Links 10/7/2020: Wayland-Info, diffoscope 151 and Tor 0.4.4.2-alpha

    Links for the day



  16. European FRAND (Related to SEP) Proponent and Famed Programmer Comes to Realise That It's Actually a “Scam”

    Even people who have long promoted the practice of mandatory "licensing" (in effect patent tax one is unable to work around) are apparently changing their minds and their tune



  17. Not Even a Single Corporate Journalist Has Written Anything About These Very Important Bits of News

    Constant propaganda from patent maximalists has long infested the media, which is sometimes controlled and even bribed to set the tone and the agenda; important developments are being tucked away and require very deep digging for ordinary citizens to find



  18. IRC Proceedings: Thursday, July 09, 2020

    IRC logs for Thursday, July 09, 2020



  19. Racism in Technology (and Who Typically Lectures Us About the Subject)

    Racism is a real problem; some approaches to tackling racism, however, can also be problematic and those who take the lead 'on behalf' of victims tend to be opportunistic and privileged few (piggybacking others' grievances to further advance their financial agenda)



  20. Links 10/7/2020: Debian 8 Long Term Support EOL, Mobian Project, Mesa 20.1.3

    Links for the day



  21. [Humour] COVID-19 is Very, Very Afraid of Human Beings Making More Monopolies Instead of Fighting Together

    The European Patent Office (EPO) to the rescue! Fighting a dangerous pandemic one profitable monopoly at a time!



  22. The News is Never 'Slow', It's Just Journalism That's Slowing Down (and Investigative Journalism Coming Under Attack)

    A mix of censorship and subtle mind control contribute to misinformed societies that shape their perception or misunderstanding of the world based on false measures of authority (where money can determine what is true and what is untrue); many topics remain completely untouched, leading to apathy in a vacuum; it's very much applicable to international organisations, which are presumed benign by virtue of being multi-national or supranational



  23. Social Control Media is About Social Control and If It Doesn't Ban You It'll Shut Down Everyone's Account (One Day)

    It’s time to leave the ‘Internet rot’ which is social control media well behind us; blogging and RSS/XML may seem like a thing of the past, but they may as well become the future (again; if we make the correct and informed choices)



  24. Microsoft's Fingers in Every Pie: The Cult Mentality That Society Needs to Become Wary of

    Microsoft and its co-founder (pretending to do his for-profit 'charity' via the Gates Foundation) are trying to control the world; in the process they've moved to control even their most potent competitor, according to Gates himself, which is GNU/Linux



  25. Links 9/7/2020: Google’s Open Usage Commons, GNOME 3.36.4, Neptune 6.5

    Links for the day



  26. IRC Proceedings: Wednesday, July 08, 2020

    IRC logs for Wednesday, July 08, 2020



  27. Links 8/7/2020: SUSE to Acquire Rancher Labs, Btrfs as Default in Fedora, Qt Creator 4.12.4

    Links for the day



  28. Yes, Master

    When the Linux Foundation tells us to tone down our language we ought to remember what kind of hypocritical stance these people have (note: the above have nothing to do with slavery, either)



  29. Fraunhofer is Again Evergreening Software Patents to Maintain Its Codecs Cartel, Forcing Everyone to Pay to View/Stream Multimedia Files

    The roller-coaster of software patents on multimedia isn't stopping; we know the culprits who can be named for perpetuating this injustice



  30. [Humour/Meme] Focusing on the Bombings and Who's Included in the Bombings

    Supremacist agenda disguised as "tolerant and inclusive" is still objectionable supremacist agenda


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts