Eye on Microsoft: Windows and Insecurity
- Dr. Roy Schestowitz
- 2009-07-30 13:00:00 UTC
- Modified: 2009-07-30 13:01:49 UTC
Summary: Assorted new links about Windows and security
●
Almost all Windows users vulnerable to Flash zero-day attacks
More than 9 out of every 10 Windows users are vulnerable to the Flash zero-day vulnerability that Adobe won't patch until Thursday, a Danish security company said today.
●
Microsoft offers patches to ward off ActiveX attacks
A critical patch for all versions of IE will protect consumers, while a security update for Visual Studio will help developers fix the controls and components they built that could be affected.
●
Conficker Mystery to Continue at Black Hat Conference
Still, the malware helped build one of the biggest botnets in years—at one point reaching around several million, according to some estimates. In May, even after months of publicity and work by vendors and researchers, the worm was still attempting to infect some 50,000 new PCs daily.
●
VG temporarily blocked iTunes, labeling it malware
AVG's free antivirus product temporarily blocked users from getting to iTunes late last week, detecting it as a Trojan, the company said on Monday.
For about five hours on Friday starting around 4 p.m. PDT, AVG users couldn't access iTunes because of the false alarm.
●
Benign security warnings have trained users to ignore them
It should come as no surprise that most Internet users ignore security certificate warnings, but a new study examines just how severe this behavior is and why people do it. Hint: it's because legit websites cry wolf with SSL warnings on a regular basis.
●
Report finds fake antivirus on the rise
PandaLabs found 1,000 samples of fake antivirus software in the first quarter of 2008. In a year, that number had grown to 111,000. And in the second quarter of 2009, it reached 374,000, Luis Corrons, technical director of PandaLabs said in a recent interview.
●
Windows 7 Ultimate Cracked and Activated Permanently with OEM SLP Master Product Key (with SLIC 2.1)
After extracting the OEM certificate and OEM product key, it’s confirmed that Windows 7 uses the same digitally signed OEM certificate (in .xrm-ms extension) that is been used in Windows Vista. Windows Vista OEM cert can be used in Windows 7 has been explained in Windows 7 forum.
●
Data Detailing New York Stock Exchange Network Exposed on Unsecured Server
Sensitive information about the technical infrastructure of the New York Stock Exchange’s computer network was left unsecured on a public server for possibly more than a year, Threat Level has learned.
Recent Techrights' Posts
- CISA Has a Microsoft Conflict of Interest Problem (CISA Cannot Achieve Its Goals, It Protects the Worst Culprit)
- people from Microsoft "speaking for" "Open Source" and for "security"
- [Video] Time to Acknowledge Debian Has a Real Problem and This Problem Needs to be Solved
- it would make sense to try to resolve conflicts and issues, not exacerbate these
- Daniel Pocock elected on ANZAC Day and anniversary of Easter Rising (FSFE Fellowship)
- Reprinted with permission from Daniel Pocock
-
- Mark Shuttleworth, Elio Qoshi & Debian/Ubuntu underage girls
- Reprinted with permission from disguised.work
- Karen Sandler, Outreachy & Debian Money in Albania
- Reprinted with permission from disguised.work
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Thursday, April 25, 2024
- IRC logs for Thursday, April 25, 2024
- Links 26/04/2024: Facebook Collapses, Kangaroo Courts for Patents, BlizzCon Canceled Under Microsoft
- Links for the day
- Gemini Links 26/04/2024: Music, Philosophy, and Socialising
- Links for the day
- Microsoft Claims "Goodwill" Is an Asset Valued at $119,163,000,000, Cash Decreased From $34,704,000,000 to $19,634,000,000 and Total Liabilities Grew to $231,123,000,000
- Earnings Release FY24 Q3
- More Microsoft Cuts: Events Canceled, Real Sales Down Sharply
- So they will call (or rebrand) everything "AI" or "Azure" or "cloud" while adding revenues from Blizzard to pretend something is growing
- Links 25/04/2024: South Korean Military to Ban iPhone, Armenian Remembrance Day
- Links for the day
- Gemini Links 25/04/2024: SFTP, VoIP, Streaming, Full-Content Web Feeds, and Gemini Thoughts
- Links for the day
- Audiocasts/Shows: FLOSS Weekly and mintCast
- the latest pair of episodes
- [Meme] Arvind Krishna's Business Machines
- He is harming Red Hat in a number of ways (he doesn't understand it) and Fedora users are running out of patience (many volunteers quit years ago)
- [Video] Debian's Newfound Love of Censorship Has Become a Threat to the Entire Internet
- SPI/Debian might end up with rotten tomatoes in the face
- Joerg (Ganneff) Jaspert, Dalbergschule Fulda & Debian Death threats
- Reprinted with permission from disguised.work
- Amber Heard, Junior Female Developers & Debian Embezzlement
- Reprinted with permission from disguised.work
- [Video] IBM's Poor Results Reinforce the Idea of Mass Layoffs on the Way (Just Like at Microsoft)
- it seems likely Red Hat layoffs are in the making
- Ulrike Uhlig & Debian, the $200,000 woman who quit
- Reprinted with permission from disguised.work
- IRC Proceedings: Wednesday, April 24, 2024
- IRC logs for Wednesday, April 24, 2024
- Over at Tux Machines...
- GNU/Linux news for the past day
- Links 24/04/2024: Layoffs and Shutdowns at Microsoft, Apple Sales in China Have Collapsed
- Links for the day
- Sexism processing travel reimbursement
- Reprinted with permission from disguised.work
- Girlfriends, Sex, Prostitution & Debian at DebConf22, Prizren, Kosovo
- Reprinted with permission from disguised.work
- Microsoft is Shutting Down Offices and Studios (Microsoft Layoffs Every Month This Year, Media Barely Mentions These)
- Microsoft shutting down more offices (there have been layoffs every month this year)
- Balkan women & Debian sexism, WeBoob leaks
- Reprinted with permission from disguised.work
- Martina Ferrari & Debian, DebConf room list: who sleeps with who?
- Reprinted with permission from Daniel Pocock
- Links 24/04/2024: Advances in TikTok Ban, Microsoft Lacks Security Incentives (It Profits From Breaches)
- Links for the day
- Gemini Links 24/04/2024: People Returning to Gemlogs, Stateless Workstations
- Links for the day
- Meike Reichle & Debian Dating
- Reprinted with permission from disguised.work
- Europe Won't be Safe From Russia Until the Last Windows PC is Turned Off (or Switched to BSDs and GNU/Linux)
- Lives are at stake
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Tuesday, April 23, 2024
- IRC logs for Tuesday, April 23, 2024
- [Meme] EPO: Breaking the Law as a Business Model
- Total disregard for the EPO to sell more monopolies in Europe (to companies that are seldom European and in need of monopoly)
- The EPO's Central Staff Committee (CSC) on New Ways of Working (NWoW) and “Bringing Teams Together” (BTT)
- The latest publication from the Central Staff Committee (CSC)
- Volunteers wanted: Unknown Suspects team
- Reprinted with permission from Daniel Pocock
- Debian trademark: where does the value come from?
- Reprinted with permission from Daniel Pocock