04.19.10

Gemini version available ♊︎

Eye on Security: ‘F1′ Keystrokes Made Safe Again, XP Unpatched, Goodbye to Vista, Vista 7 Flaw

Posted in Microsoft, Security, Vista, Vista 7, Windows at 4:53 am by Dr. Roy Schestowitz

Windows XP is sad

Summary: A big heap of security news from the past week, hopefully showing the really sad state of Windows

Patchfest

Microsoft Targets Media Flaws In April Patches

Another big Microsoft Patch Tuesday coming

Big Patch Tuesday On Way

Microsoft Schedules Major Patch Tuesday

It’s likely that at least a few Microsoft employees had to work overtime in preparation for tomorrow’s Patch Tuesday activities. The company’s supposed to release 11 security bulletins in order to address 25 vulnerabilities, which may send signals about both its dedication to fixing stuff and the state of some popular software.

Microsoft to fix F1 bug

Microsoft plans to fix the ‘F1′ security bug that has been plaguing Internet Explorer users for six weeks in its monthly set of security patches tomorrow.

XP Neglect

MS kernel patch skirts infected machines (mentioned a few days ago)

Microsoft’s latest batch of patches contains a kernel update designed not to install on machines infected with a rootkit.

Microsoft Tries to Avoid Windows Blue Screen Repeat (same here)

Microsoft Will Not Patch Newest XP Virus

Microsoft Advises Some XP Users to stay Unpatched (interesting headline, but not entirely accurate)

Vista Neglect

Microsoft slams coffin lid on Vista

Microsoft has killed support for its unloved Windows Vista operating system today.

The company announced in February that the service pack-free version of its post-XP, pre-Windows 7 OS would hit end of life support in April.

This means that from today, the OS which hit manufacturers in late 2006 is left entirely at the mercy of hackers who might wish to exploit the now unsupported code.

Windows Vista SP1 needed for support to continue

Microsoft Ends Original Vista Support

Microsoft ends support for original Windows Vista

Microsoft Ending Support For Windows Vista [Redmond Decides Not Worth It Support Non-Service Pack Vista, Although They Still Support XP]

Microsoft to end support for earlier Windows versions

End of the road for Windows Vista RTM

Microsoft To Stop Supporting Windows Vista RTM

No more support for Microsoft Windows Vista – so now what do you do?

Microsoft is now using fake numbers about Vista 7. These are fake for reasons we explained before (it was the same with Vista).

Vista 7 Spin

Microsoft to Patch Unhackable Windows 7 Bug (also here)

Later today, Microsoft will play it safe by patching a Windows 7 bug that it says can’t be exploited.

Of the 11 security bulletins that will be released in a few hours, “Bulletin 7″ will address one or more vulnerabilities in Windows 2000, Windows XP and Windows Server 2003.

Worth seeing:

Zeus (Windows Spyware/Botnet)

Zeus spyware pretends to be Royal Mail PDF

Once infected, compromised machines ‘phone home’ to hacker controlled servers in China.

Zeus botnet exploits unpatched PDF flaw

Researchers find bugs in archive file formats

Most antivirus vendors have patched their applications in order to detect the tampered archive file formats, such as “.rar,” and “.zip,” said Tomislav Pericin, founder of the commercial software protection project RLPack.

New Malware

Hentai malware publishes web history of marks online

Some bogus files posing as games from Abel software attempt to trick victims into handing over personal information as part of a supposed game registration process. Meanwhile, in the background, the malware is collecting information on the victim’s computer including domain, OS version, file use history and IE favourites.

Fake anti-virus scams on the rise, Google says

In a blog post previewing a 13-month study on the prevalence of fake AVs on the Web, Google said that more than 11,000 individual domains were involved in the distribution of these scams. According to Google, that figure accounts for roughly 15 percent of all malicious software on the Internet.

Conficker

China Reports Millions of Conficker Worm Infections (Conficker is good for GNU/Linux)

China had about 7 million Internet Protocol (IP) addresses infected with Conficker B at the end of last year, according to a recent annual security report posted on the Web site of China’s National Computer Network Emergency Response Technical Team (CNCERT). The number of infections varied during the second half of the year, which the report covered, but was higher than 5 million during all but one week.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

DecorWhat Else is New


  1. From Competitive (Top-Level, High-Calibre, Well-Paid) Jobs to 2,000 Euros a Month -- How the EPO is Becoming a Sweatshop by Patent Examiners' Standards

    A longish video about the dreadful situation at the EPO, where staff is being ‘robbed’ and EPO funds get funnelled into some dodgy stock market investments (a clear violation of the institution’s charter)



  2. [Meme] Protecting European Patent Courts From EPO 'Mafia'

    With flagrant disregard for court rulings (or workarounds to dodge actual compliance) it seems clear that today's EPO management is allergic to justice and to judges; European Patents perish at unprecedented levels in national European courts and it should be kept that way



  3. Links 15/10/2021: Pine64's New PinePhone Pro and Ubuntu 22.04 LTS Codename

    Links for the day



  4. [Meme] GitHub Isn't Free Hosting, It's All About Control by Microsoft

    Deleting GitHub isn’t a political statement but a pragmatic decision, seeing how Microsoft routinely misuses its control over GitHub to manipulate the market



  5. With EPO 'Strike Regulations' Belatedly Ruled Unlawful, EPO Management May be Lowering the Salary Even Further by Introducing Outside 'Temps' or Casual Workers

    Institutional capture by an 'IP' (litigation) Mafia is nearly complete; with illegal so-called (anti) 'Strike Regulations' out the door, they're quickly moving on to another plan, or so it seems on the surface



  6. Links 15/10/2021: 95% of Ransomware Targets Windows

    Links for the day



  7. IRC Proceedings: Thursday, October 14, 2021

    IRC logs for Thursday, October 14, 2021



  8. The EPO’s Overseer/Overseen Collusion — Part XII: The French Connection

    The EPO‘s presidency (led by Frenchmen for nearly 15 years out of the past 18 years; Benoît Battistelli and António Campinos are both French despite their somewhat misleading surnames) is extremely unlikely to even be mildly scrutinised by the French delegates because of a web of nepotism and protectionism



  9. [Meme] Another Maladministration Meeting Comes to an End

    Did the EPO‘s overseeing body properly tackle Benoît Battistelli‘s illegal acts, authorised by that very same overseeing body? Don’t hold your breath as António Campinos continues to crack down on staff (maybe ILOAT will rule on it in 2030)



  10. Links 14/10/2021: LibreOffice 7.2.2, Happy Birthday to Jolla, Ubuntu 21.10, Devuan GNU+Linux 4.0, OpenBSD 7.0

    Links for the day



  11. [Teaser] What Miguel de Icaza Really Thinks of the CEO of Microsoft GitHub

    Following the opening of a new series about Microsoft GitHub we drop a little teaser today; we expect dozens of parts to be released in the coming weeks/months as facts are being validated and organised



  12. Splitting the Time to Cover More Leaks and Exposés

    We take stock of Part 11 of the ongoing EPO series (“EPO’s Overseer/Overseen Collusion”) and explain what caused various delays yesterday; we may have to up our pace a little in order to keep up with an influx of leaks and whistleblowers



  13. [Meme] Destroying the Workplace

    The working conditions at the EPO continue to worsen under the António Campinos regime, perpetuating the decade-long 'demolition project' of Benoît Battistelli and his cohorts in the complicit Administrative CouncilThe working conditions at the EPO continue to worsen under the António Campinos regime, perpetuating the decade-long 'demolition project' of Benoît Battistelli and his cohorts in the complicit Administrative Council



  14. Microsoft GitHub Exposé — Part I — Inside a Den of Corruption and Misogynists

    Today we commence a new series that implicates Microsoft, GitHub, Copilot, and Team Mono



  15. EPO Management Tricks EPO Staff Into Taking More Paycuts

    “Education and childcare reform” [sic] is an António Campinos "reform" in the same sense regressive salary reductions are just “adjustments” (euphemism); Electronic opt-in gaffes, according to staff representatives, show that the tradition of Benoît Battistelli carries on at the Office, taking away from staff for a few corrupt officials to milk the institution to death



  16. Links 14/10/2021: Whisker Menu 2.6.1 and KDE's Birthday

    Links for the day



  17. Links 14/10/2021: DragonFly 6.0.1 Released and Red Hat Loses Another Top Executive

    Links for the day



  18. IRC Proceedings: Wednesday, October 13, 2021

    IRC logs for Wednesday, October 13, 2021



  19. Süddeutsche Zeitung Became a Propaganda Arm of EPO Management (and by Extension Software Patents/Patent Lobbyists)

    EPO ‘genius’ António Campinos enjoys shallow press coverage, which echoes or resembles Benoît Battistelli‘s corruption of the media (paid-for fluff)



  20. GNOME (and Debian) Infringe Human Rights by Shipping Parental Control Software (Internally Called “Malcontent”)

    Guest post by Ryan, reprinted with permission



  21. No, JWZ, Discord is Not “IRC With Pictures”

    Guest post by Ryan, reprinted with permission



  22. The EPO’s Overseer/Overseen Collusion — Part XI: “General Bock” - Battistelli's Swiss Apprentice?

    The António Campinos-led EPO won’t be subjected to real oversight by the Administrative Council, which ‘met’ (online) earlier today; so we look at who in the Administrative Council did what; today we wrap up the parts about Switzerland (third part of three)



  23. Links 13/10/2021: Sparky 2021.10 and New Archcraft

    Links for the day



  24. Links 13/10/2021: Firefox Keylogger on (By Default), GNOME Platform Design Discussed

    Links for the day



  25. [Meme] [Teaser] Swiss Alexandre Benallas

    The EPO‘s French dictator, Benoît ‘Vichy’ Battistelli, might be relieved to hear that his enabler in the adjacent Switzerland also enlisted armed bullies to keep the population down (the father of António Campinos might know a thing or two about those; it’s why he fled to France)



  26. IRC Proceedings: Tuesday, October 12, 2021

    IRC logs for Tuesday, October 12, 2021



  27. A Tale of Two KDE Distributions: Kubuntu 21.10 and Debian 11 GNU/Linux

    Guest post by Ryan, reprinted with permission



  28. Citation/Atlas 'Security' Exam is a Total Farce, But It's Still Good for Entertainment Purposes

    What are people being taught about so-called 'security'? Might that explain so many security breaches? (Poor training, wrong assumptions)



  29. [Meme] [Teaser] Swiss Rumbustious Alpha-Rambos

    Aggressive men tarnish the image of Switzerland as a soft nation of peace; details tomorrow...



  30. Unqualified Managers and Demoralising Leadership in Switzerland (Like in EPO)

    Switzerland’s media (what’s left of it) is currently looking into new scandals associated with Christian Bock, who back in 2013 helped back the EPO's illegal anti-strike regulations


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts