Bonum Certa Men Certa

Vista 7 Cracked Again

Window



Summary: Windows security still broken, judging by Pwn2Own

WINDOWS is not doing terribly well. The margins are low and Microsoft relies on bundling alone (which requires a hardware buying spree). Looking at the past week's news, there was one headline alone with "Vista" in it and just 5 clusters of headlines about "Windows 7", 1 of which was a whitepaper.



Vista 7 is hardly mentioned these days, except for occasional complaints or PR fluff. Microsoft continues to improperly count "sales" and we have already explained how Microsoft fakes these to achieve an illusion of success. In many ways, Vista 7 is just Vista, but it looks a little different (notably the new deskbar). "Well the initial impression is how much it looks like Vista," said Microsoft's booster Jack Schofield about Vista 7, "Which I think is…uh…the thing I’m not supposed to say."

In previous posts we showed that Vista 7 is considered worse when it come to security than its predecessor, Windows Vista. To name some posts on the subject:



According to IDG, "Hacker busts IE8 on Windows 7 in 2 minutes"

Two researchers yesterday won $10,000 each at the Pwn2Own hacking contest by bypassing important security measures of Windows 7.

Both Peter Vreugdenhil of the Netherlands and a German researcher who would only identify himself by the first name Nils found ways to disable DEP (data execution prevention) and ASLR (address space layout randomization), which are two of Windows 7's most vaunted anti-exploit features. Each contestant faced down the fully-patched 64-bit version of Windows 7 and came out a winner.


"Hacker Bypasses Windows 7 Anti-Exploit Features In IE 8 Hack," reports Dark Reading, a Web site which is focused on security issues.

A Dutch researcher won $10,000 in the Pwn2Own hacking contest this week for hacking Internet Explorer 8 on a Windows 7 machine -- bypassing built-in anti-exploit features in the operating system.


From Microsoft sites comes a bit of spin and it's worth noting that Apple's proprietary products got cracked too.

Miller used one of the flaws he found by dumb fuzzing yesterday to exploit Safari on a MacBook Pro, walking off with the notebook, $10,000 and a free trip to Las Vegas this summer to the DefCon hacking conference.


Here is an interview with Miller and a summary from The Inquirer that says: "Apple and Microsoft get trashed by hackers again"

Some months ago we wrote about Microsoft entering Telstra [1, 2], so the following new item is also worth mentioning.

Telstra Corporation director of security services, Andy Solterback, has responded to claims by Microsoft that it has largely fixed security problems.


It is now being claimed the Internet attacks which are mostly caused by Windows zombies hit Seattle the most.

Seattle is top, according to the report, for cyberattacks and potential infections and online behaviour that can lead to cybercrime, like online shops, online banks and wi-fi.


It is rather interesting that Windows zombies go right back where they came from.

Recent Techrights' Posts

Techrights' Statement on Code of Censorship (CoC) and Kent Overstreet: This Was the Real Purpose of Censorship Agreements All Along
Bombing people is OK (if you sponsor the key organisations), opposing bombings is not (a CoC in a nutshell)
[Meme] The Most Liberal Company
"Insurrection? What insurrection?"
apple.com Traffic Down Over 7%, Says One Spyware Firm; Apple's Liabilities Increased Over 6% to $308,030,000,000
Apple is also about 120 billion dollars in debt
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, November 23, 2024
IRC logs for Saturday, November 23, 2024
[Meme] GAFAMfox
Mozilla Firefox in a state of extreme distress
Google Can Kill Mozilla Any Time It Wants
That gives Google far too much power over its rival... There are already many sites that refuse to work with Firefox or explicitly say Firefox isn't supported
Free (as in Freedom) Software Helps Tackle the Software Liability Issue, It Lets Users Exercise Greater Control Over Programs
Microsofters have been trying to ban or exclude Free software
In the US, Patent Laws Are Up for Sale
This problem is a lot bigger than just patents
ESET Finds Rootkits, Does Not Explain How They Get Installed, Media Says It Means "Previously Unknown Linux Backdoors" (Useful Distraction From CALEA and CALEA2)
FUD watch
Techdirt Loses Its Objectivity in Pursuit of Money
The more concerning aspects are coverage of GAFAM and Microsoft in particular
Links 23/11/2024: Press Sold to Vultures, New LLM Blunders
Links for the day
Links 23/11/2024: "Relationship with Oneself" and Yretek.com is Back
Links for the day
Links 23/11/2024: "Real World" Cracked and UK Online Safety Act is Law
Links for the day
Links 23/11/2024: Celebrating Proprietary Bluesky (False Choice, Same Issues) and Software Patents Squashed
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, November 22, 2024
IRC logs for Friday, November 22, 2024
Gemini Links 23/11/2024: 150 Day Streak in Duolingo and ICBMs
Links for the day
Links 22/11/2024: Dynamic Pricing Practice and Monopoly Abuses
Links for the day
Topics We Lacked Time to Cover
Due to a Microsoft event (an annual malware fest for lobbying and marketing purposes) there was also a lot of Microsoft propaganda
Microsofters Try to Defund the Free Software Foundation (by Attacking Its Founder This Week) and They Tell People to Instead Give Money to Microsoft Front Groups
Microsoft people try to outspend their critics and harass them
[Meme] EPO for the Kids' Future (or Lack of It)
Patents can last two decades and grow with (or catch up with) the kids
EPO Education: Workers Resort to Legal Actions (Many Cases) Against the Administration
At the moment the casualties of EPO corruption include the EPO's own staff
Gemini Links 22/11/2024: ChromeOS, Search Engines, Regular Expressions
Links for the day
This Month is the 11th Month of This Year With Mass Layoffs at Microsoft (So Far It's Happening Every Month This Year, More Announced Hours Ago)
Now they even admit it
Links 22/11/2024: Software Patents Squashed, Russia Starts Using ICBMs
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, November 21, 2024
IRC logs for Thursday, November 21, 2024