Bonum Certa Men Certa

Eye on Security: 'F1' Keystrokes Made Safe Again, XP Unpatched, Goodbye to Vista, Vista 7 Flaw

Windows XP is sad



Summary: A big heap of security news from the past week, hopefully showing the really sad state of Windows

Patchfest



Microsoft Targets Media Flaws In April Patches

Another big Microsoft Patch Tuesday coming

Big Patch Tuesday On Way

Microsoft Schedules Major Patch Tuesday

It's likely that at least a few Microsoft employees had to work overtime in preparation for tomorrow's Patch Tuesday activities. The company's supposed to release 11 security bulletins in order to address 25 vulnerabilities, which may send signals about both its dedication to fixing stuff and the state of some popular software.


Microsoft to fix F1 bug

Microsoft plans to fix the 'F1' security bug that has been plaguing Internet Explorer users for six weeks in its monthly set of security patches tomorrow.


XP Neglect



MS kernel patch skirts infected machines (mentioned a few days ago)

Microsoft's latest batch of patches contains a kernel update designed not to install on machines infected with a rootkit.


Microsoft Tries to Avoid Windows Blue Screen Repeat (same here)

Microsoft Will Not Patch Newest XP Virus

Microsoft Advises Some XP Users to stay Unpatched (interesting headline, but not entirely accurate)

Vista Neglect



Microsoft slams coffin lid on Vista

Microsoft has killed support for its unloved Windows Vista operating system today.

The company announced in February that the service pack-free version of its post-XP, pre-Windows 7 OS would hit end of life support in April.

This means that from today, the OS which hit manufacturers in late 2006 is left entirely at the mercy of hackers who might wish to exploit the now unsupported code.


Windows Vista SP1 needed for support to continue

Microsoft Ends Original Vista Support

Microsoft ends support for original Windows Vista

Microsoft Ending Support For Windows Vista [Redmond Decides Not Worth It Support Non-Service Pack Vista, Although They Still Support XP]

Microsoft to end support for earlier Windows versions

End of the road for Windows Vista RTM

Microsoft To Stop Supporting Windows Vista RTM

No more support for Microsoft Windows Vista - so now what do you do?

Microsoft is now using fake numbers about Vista 7. These are fake for reasons we explained before (it was the same with Vista).

Vista 7 Spin



Microsoft to Patch Unhackable Windows 7 Bug (also here)

Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can't be exploited.

Of the 11 security bulletins that will be released in a few hours, "Bulletin 7" will address one or more vulnerabilities in Windows 2000, Windows XP and Windows Server 2003.


Worth seeing:



Zeus (Windows Spyware/Botnet)



Zeus spyware pretends to be Royal Mail PDF

Once infected, compromised machines 'phone home' to hacker controlled servers in China.


Zeus botnet exploits unpatched PDF flaw

Researchers find bugs in archive file formats

Most antivirus vendors have patched their applications in order to detect the tampered archive file formats, such as ".rar," and ".zip," said Tomislav Pericin, founder of the commercial software protection project RLPack.


New Malware



Hentai malware publishes web history of marks online

Some bogus files posing as games from Abel software attempt to trick victims into handing over personal information as part of a supposed game registration process. Meanwhile, in the background, the malware is collecting information on the victim's computer including domain, OS version, file use history and IE favourites.


Fake anti-virus scams on the rise, Google says

In a blog post previewing a 13-month study on the prevalence of fake AVs on the Web, Google said that more than 11,000 individual domains were involved in the distribution of these scams. According to Google, that figure accounts for roughly 15 percent of all malicious software on the Internet.


Conficker



China Reports Millions of Conficker Worm Infections (Conficker is good for GNU/Linux)

China had about 7 million Internet Protocol (IP) addresses infected with Conficker B at the end of last year, according to a recent annual security report posted on the Web site of China's National Computer Network Emergency Response Technical Team (CNCERT). The number of infections varied during the second half of the year, which the report covered, but was higher than 5 million during all but one week.


Recent Techrights' Posts

How We Process Screenshots of Slop to Suitably Tag Them as Slop
everything is a single command
 
Links 11/08/2025: Meritless Twitter Suspensions and Disney Scraps Deepfake Dwayne Johnson
Links for the day
Gemini Links 11/08/2025: Upgrading Debian Bookworm and Better Quality PDFs From Gemini Pages
Links for the day
Currys PCWorld Lied a Decade Ago, 10 Years Later It Still Effectively Voids Your Warranty for Installing GNU/Linux Despite It Being Increasingly Mainstream
Microsoft gatekeepers
Team GNOME Has Libeled Me for Nearly 20 Years
we are not dealing with sane people
Experience With Airlines in 'Web Sites' and in 'Apps'
In a lot of ways, Stallman Was Right about what JavaScript would turn out to be
Open Does Not Mean Free
wiser to ask if some program is freedom-respecting
The Register MS Takes Money From Companies Banned by the Biden and Trump Administrations (National Security Risk)
today's sponsor
Sabotaging GNU/Linux PCs (and Users) is Not a 'Joke'
maybe cruelty is the very objective
Links 11/08/2025: Data Breaches, Politics, and Climate
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, August 10, 2025
IRC logs for Sunday, August 10, 2025
Gemini Links 11/08/2025: Tea Caffeine Hot and Super ZZ Zero
Links for the day
Slopwatch: LinuxSecurity, Brian Fagioli, and Other Serial Sloppers
Maybe Microsoft wants to dub this "Web5"
Gemini Links 10/08/2025: Residents Management Company, Automation, and Politics
Links for the day
Links 10/08/2025: AOL Ending Dial-up
Links for the day
Seductive Mirage or Allure of Complex, Proprietary Coffee Machines (or Similar White Elephants)
Software is a lot like those things
Links 10/08/2025: Webrings, “AI Sunglasses” and “AI Eyeglasses”, US Administration Intensifies Attacks on Science and Research
Links for the day
Sometimes Newer is Worse
We generally need to reject this dumb notion that "old" means bad
The Code Used to Make Techrights Fits on a Seventh of a Floppy Disk (or 100KB When Compressed)
For the sake of comparison I've just downloaded the latest version of WordPress. The ZIP file is 27.2MB in size, or ~27,200KB.
What They Tell Young Programmers
Coding in 2025
Simpler is Better When Simple is Enough
Over-complicating things to "sell" new versions is so 1990s
Links 10/08/2025: From Social Control Media to Prison, New Examples of Windows TCO
Links for the day
Sloppy Reporting About Slop, or How The Register MS Lowers Its Standards
Maybe the management isn't even aware of this
IBM's Strategy: Cull 'Expensive' Workers, Replace Them With Cheaper Ones
So far we saw not even one rebuttal or challenge to the claim of Red Hat layoffs scheduled for tomorrow
If You Attack Somebody Too Much You Legitimise and Strengthen That Somebody
at the end those attacks add up to a "martyr" status
The Man Who Helped Microsoft Kill Linux is Trying to Delay Our Lawsuits Against Him
By conservative estimates, and based on court documents submitted by them, they're prepared to spend over a million dollars on lawyers, fighting against me and my wife
Gemini Links 10/08/2025: Gen Con 2025 and Framework Laptop
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, August 09, 2025
IRC logs for Saturday, August 09, 2025
The Register MS (Microsoft) or The Register AI (Slop)?
What a slopfest!
Is Red Hat About to Give the Boot to GNOME People Who Helped Microsoft 'Secure' (Monopolised) Boot?
It was always a dumb idea to play along with Microsoft's hardware mischief
Sales of Windows on PCs (Windows Licences) Go Down
Microsoft has a big problem in its hands
The Hype That Microsoft and The Register MS (Among Others) Promote Helps Stage DDoS Attacks on Free Software Sites
Microsoft is, to put it bluntly, pure evil
The Goal of Coopetition Assumes You're Friends
it will never work with Microsoft
Links 09/08/2025: Putin Allegedly to Visit Alaska (Which He Deems Part of Russia), Mike Tyson Sued for Copyright Infringement
Links for the day
Slopwatch: Linux Journal, LinuxSecurity, and Google News With Its Slopfarms of Choice
SEO spam, made with LLMs
Follow the Money: The Register MS Gets Paid to Promote "Hey Hi" Ponzi Scheme/Hype, Some Fake 'Articles' Might Be Composed by LLMs Already
paid to promote slop
Gemini Links 09/08/2025: Rethinking Aliases and Posting on Gopher vs. the Web
Links for the day
Links 09/08/2025: Apollo 13 Astronaut Jim Lovell Dies, Slop Future Bleak
Links for the day
After Shutting Down Studios, Divisions, Applications (e.g. Skype) Microsoft is Also Shutting Down 'Apps'
Cuts all around as layoffs persist this month, Microsoft tries to get many people to resign, and debt skyrockets
Most of Geminispace Can Probably Fit on a CD-ROM or a DVD (the Textual Part)
If one excludes very large capsules and ones that contain non-textual contenty
Eventually UEFI 'Secure Boot' Will be Dropped (Users Will Demand Its Removal and Boycott Its Pushers)
we expect OEMs will just listen to users
The Register MS: We Know Slop is a Bubble and Mindless Hype, But We Get Paid to Participate
Call out the culprits
Hate Mail From Anonymous Cowards
if this persists, we'll need to escalate
There Are Probably Over a Million Pages in Geminispace
there are two many limitations which merit a mention when it comes to assessing magnitude
Informal Open Letter to the Lawyer of the Microsofters (on Who's Funding the SLAPPs Against Techrights)
Whenever I ask about the funding they try to change the subject and act all aggressive
Microsoft Lunduke is Just Provoking People for Provocation's Sake
Be forewarned and remember where this guy came from: Microsoft
Besieged by Plagiarists Who Play With LLMs and Image Fusions
We really need to exercise or use our collective voice to oppose Serial Sloppers
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, August 08, 2025
IRC logs for Friday, August 08, 2025
Gemini Links 09/08/2025: Water Painting and Political Violence
Links for the day