Bonum Certa Men Certa

Eye on Security: 'F1' Keystrokes Made Safe Again, XP Unpatched, Goodbye to Vista, Vista 7 Flaw

Windows XP is sad



Summary: A big heap of security news from the past week, hopefully showing the really sad state of Windows

Patchfest



Microsoft Targets Media Flaws In April Patches

Another big Microsoft Patch Tuesday coming

Big Patch Tuesday On Way

Microsoft Schedules Major Patch Tuesday

It's likely that at least a few Microsoft employees had to work overtime in preparation for tomorrow's Patch Tuesday activities. The company's supposed to release 11 security bulletins in order to address 25 vulnerabilities, which may send signals about both its dedication to fixing stuff and the state of some popular software.


Microsoft to fix F1 bug

Microsoft plans to fix the 'F1' security bug that has been plaguing Internet Explorer users for six weeks in its monthly set of security patches tomorrow.


XP Neglect



MS kernel patch skirts infected machines (mentioned a few days ago)

Microsoft's latest batch of patches contains a kernel update designed not to install on machines infected with a rootkit.


Microsoft Tries to Avoid Windows Blue Screen Repeat (same here)

Microsoft Will Not Patch Newest XP Virus

Microsoft Advises Some XP Users to stay Unpatched (interesting headline, but not entirely accurate)

Vista Neglect



Microsoft slams coffin lid on Vista

Microsoft has killed support for its unloved Windows Vista operating system today.

The company announced in February that the service pack-free version of its post-XP, pre-Windows 7 OS would hit end of life support in April.

This means that from today, the OS which hit manufacturers in late 2006 is left entirely at the mercy of hackers who might wish to exploit the now unsupported code.


Windows Vista SP1 needed for support to continue

Microsoft Ends Original Vista Support

Microsoft ends support for original Windows Vista

Microsoft Ending Support For Windows Vista [Redmond Decides Not Worth It Support Non-Service Pack Vista, Although They Still Support XP]

Microsoft to end support for earlier Windows versions

End of the road for Windows Vista RTM

Microsoft To Stop Supporting Windows Vista RTM

No more support for Microsoft Windows Vista - so now what do you do?

Microsoft is now using fake numbers about Vista 7. These are fake for reasons we explained before (it was the same with Vista).

Vista 7 Spin



Microsoft to Patch Unhackable Windows 7 Bug (also here)

Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can't be exploited.

Of the 11 security bulletins that will be released in a few hours, "Bulletin 7" will address one or more vulnerabilities in Windows 2000, Windows XP and Windows Server 2003.


Worth seeing:



Zeus (Windows Spyware/Botnet)



Zeus spyware pretends to be Royal Mail PDF

Once infected, compromised machines 'phone home' to hacker controlled servers in China.


Zeus botnet exploits unpatched PDF flaw

Researchers find bugs in archive file formats

Most antivirus vendors have patched their applications in order to detect the tampered archive file formats, such as ".rar," and ".zip," said Tomislav Pericin, founder of the commercial software protection project RLPack.


New Malware



Hentai malware publishes web history of marks online

Some bogus files posing as games from Abel software attempt to trick victims into handing over personal information as part of a supposed game registration process. Meanwhile, in the background, the malware is collecting information on the victim's computer including domain, OS version, file use history and IE favourites.


Fake anti-virus scams on the rise, Google says

In a blog post previewing a 13-month study on the prevalence of fake AVs on the Web, Google said that more than 11,000 individual domains were involved in the distribution of these scams. According to Google, that figure accounts for roughly 15 percent of all malicious software on the Internet.


Conficker



China Reports Millions of Conficker Worm Infections (Conficker is good for GNU/Linux)

China had about 7 million Internet Protocol (IP) addresses infected with Conficker B at the end of last year, according to a recent annual security report posted on the Web site of China's National Computer Network Emergency Response Technical Team (CNCERT). The number of infections varied during the second half of the year, which the report covered, but was higher than 5 million during all but one week.


Recent Techrights' Posts

Links 03/11/2025: Internet Anniversary
Links for the day
Two Years of Uptime
Reboots are seldom involuntary
Richard Stallman is Giving Another Talk in Less Than a Fortnight
in two weeks' time (13 days from now)
Windows Falls Below 20% in the UK
Many people choose to leave Windows altogether
Microsoft's Search Business Falls to Lowest Point in 2 Years, Based on statCounter
what can Microsoft sell other than shares in Microsoft?
Evidence Regarding Layoffs at Red Hat
Seems like IBM layoffs
Microsoft: Our "Goodwill" Value Grew More Than Tenfold Since 2011
Hallmark of pseudo-economics
GNU/Linux as a Boarding Pass
being mostly analogue is still feasible
Links 03/11/2025: Lack of Trust in LLMs and Windows TCO at Jaguar
Links for the day
Gemini Links 03/11/2025: Books in October and Change
Links for the day
Mozilla Firefox Won't Survive and Many Sites Don't Work With It (Compatibility Abandoned)
The Web has become monocultural
Debian is Non-Free
Devuan might be worth looking into
Slopwatch: Brian Fagioli and LinuxSecurity
This is a real problem and most certainly a big problem because when people try to find real information about security and GNU/Linux they instead read "word salads" made by bots
Four Reasons to Party With Us in Four Days, Celebrating the Four Freedoms
Today we expect to be back to a more-or-less regular publication pace
Links 03/11/2025: The "Smartphone Panopticon" and Belarus' Hybrid Attacks on EU Intensify
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, November 02, 2025
IRC logs for Sunday, November 02, 2025
Microsoft's Debt Has Skyrocketed by More Than 15 Billion Dollars in 6 Months or 8.2 Billion Dollars in the Past 3 Months Alone
The corporate media intentionally disregards - or merely turns a blind eye to - such data
Rumour: IBM Layoffs in Canada Starting Tomorrow
"RA (IBM's term for layoffs) Coming to Canada this week (Nov 3rd)"
Debunking False/Misleading Statements Made or Told to the High Court
People who try to cheat the system by gaslighting judges will end up discrediting themselves
Fear, Uncertainty, Doubt (FUD) by LLM Slop
The Web has become such a sordid mess that this FUD made by bots is what Google News deems to be "the news"
This Month's Analytics Show Vista 11 Down, GNU/Linux Up
After pulling the plug on Vista 10 we see losses - not gains - for Vista 11
Almost Fully Caught Up
The EPO series will continue very soon, maybe tomorrow or on Tuesday
Links 02/11/2025: Another Halloween Bust and MAGA Regime Says Public Universities Should No Longer Hire 'Foreign' Employees
Links for the day
The Long-Coveted Milestone of 3,200 Active Gemini Capsules
Despite being away some days last week, about 50,000 Gemini requests were served each day, on average
Five More Days Till Techrights Party
We'll have many more batches of Daily Links as we catch up with a 'backlog' of news
Links 02/11/2025: More Nuclear Escalations and "Anti-Cybercrime Laws Are Being Weaponized to Repress Journalism"
Links for the day
Gemini Links 02/11/2025: "The Pragmatic Programmer", Perl New Features and Foostats
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, November 01, 2025
IRC logs for Saturday, November 01, 2025
Linux.com is Becoming Microsoft
They took a once-reputable site with a vast audience and turned it into a pile of trash
Microsoft Lunduke: People Pointing Out I'm a Bigot is a Badge of Honour
It's almost as if he openly admits being a troll and is proud of it
Oracle's Debt Continues Rising to All-Time Highs, The "Slop Bubble" is a Smokescreen for Larry Ellison
wishful-thinking bubble waiting to implode completely
News on the Web is Becoming Rare, Shallow, and Difficult to Find
To efficiently and rapidly find original and important news without underlying comprehension/understanding of the news (and its context) is a hard task
Slopwatch: Linux Journal, Serial Slopper, WebProNews, and More
getting back into the habit
The Cocaine Patent Office - Part III: European Patent Office Officials Cannot Claim False Identification
Corroborating with other sources is always desirable if possible. We shall do so later in this series.
Facebook's Debt Leaps to Over 51 Billion Dollars
A lot of this is a bubble, aside from the bubble the media irresponsibly dubs "AI"
Still Catching Up, Daily Links a Top Priority
Readers who have additional information about the EPO can send it along to us
3 Days Ago Over at Tux Machines...
GNU/Linux news
Links 01/11/2025: "Americans Are Defaulting on Car Loans at an Alarming Rate" While Many Left to Starve (SNAP)
Links for the day
Gemini Links 01/11/2025: FIFO and Gemini Age Survey
Links for the day
Why Does German Media Protect the EPO From Accountability for Cocaine?
Can we trust such media to properly inform the public?
Most of This Month Will Deal With EPO Scandals
A timeline of sorts
Links 01/11/2025: Microsoft Azure Goes Offline Again
Links for the day
Links 01/11/2025: Microsoft Distributes Malware Again, Radio Free Asia Shut Down by Dictator
Links for the day
November is Here, Anniversary Party This Coming Friday
Expect this site to return to its normal publication pace either by tomorrow or Monday
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, October 31, 2025
IRC logs for Friday, October 31, 2025
Gemini Links 01/11/2025: Synergetic Disinformation and Software Maintenance
Links for the day
IRC Proceedings: Thursday, October 30, 2025
IRC logs for Thursday, October 30, 2025
IRC Proceedings: Wednesday, October 29, 2025
IRC logs for Wednesday, October 29, 2025