|
|
User Controls
|
New User
|
Login
|
Edit/View My Profile
|
|
|
|
ActiveMac
|
Articles
|
Forums
|
Links
|
News
|
News Search
|
Reviews
|
|
|
|
News Centers
|
Windows/Microsoft
|
DVD
|
ActiveHardware
|
Xbox
|
MaINTosh
|
News Search
|
|
|
|
ANet Chats
|
The Lobby
|
Special Events Room
|
Developer's Lounge
|
XBox Chat
|
|
|
|
FAQ's
|
Windows 98/98 SE
|
Windows 2000
|
Windows Me
|
Windows "Whistler" XP
|
Windows CE
|
Internet Explorer 6
|
Internet Explorer 5
|
Xbox
|
DirectX
|
DVD's
|
|
|
|
TopTechTips
|
Registry Tips
|
Windows 95/98
|
Windows 2000
|
Internet Explorer 4
|
Internet Explorer 5
|
Windows NT Tips
|
Program Tips
|
Easter Eggs
|
Hardware
|
DVD
|
|
|
|
Latest Reviews
|
Applications
|
Microsoft Windows XP Professional
|
Norton SystemWorks 2002
|
|
Hardware
|
Intel Personal Audio Player
3000
|
Microsoft Wireless IntelliMouse
Explorer
|
|
|
|
Site News/Info
|
About This Site
|
Affiliates
|
ANet Forums
|
Contact Us
|
Default Home Page
|
Link To Us
|
Links
|
Member Pages
|
Site Search
|
Awards
|
|
|
|
Credits
©1997/2004, Active Network. All
Rights Reserved.
Layout & Design by
Designer Dream. Content
written by the Active Network team. Please click
here for full terms of
use and restrictions or read our
Privacy Statement.
|
|
|
|
|
|
|
|
Time:
12:11 EST/17:11 GMT | News Source:
ZDNet |
Posted By: Julien Jay |
Thanks Tim! The way Dave Thomas describes it, he and his staff were trying to track down a series of unusual bugs in Windows, when they stumbled across something that really worried them. There, on their screens along with the code they were debugging, was the name and password they'd just used for Microsoft's Passport service. Worse, it was in plain text, and readily accessible. As he looked more deeply, he realized that creating a worm that could recover that information would be, in his words, "trivial." Thomas, who is CTO of the Oregon-based software quality assurance company, Bugtoaster, says that he wasn't really trying to get into the security business, but that this was something too obvious to let pass. It was also too important.
|
|
#1 By
135 (209.180.28.6)
at
9/28/2001 2:10:05 PM
|
Interesting, but the real lesson here is to not use Win9x.
I love the Gibson paranoia... if we install a keystroke capture program, boy are you ever screwed!
Well duh, so don't do that!
|
#2 By
1295 (216.84.210.100)
at
9/28/2001 3:17:56 PM
|
#3, I'd like for you to explain how my freedom of choice has EVER been limited by MS. Its quite simple. The only way consumers have a "limited" choice when it comes to any industry MS is in is when they are uneducated about their options.
Now with that said. This applies to all industries... very simply its a fact of life. MS integrates Windows Media Player and Windows Messenger in XP... cry cry cry... if someone doesn't know they can use something else they are "Forced" to use the very well written extremely easy to use software already installed.
Of course you will come back and say that I'm MS biased and that MS is using its might in the OS market to push their products... um... they make no money buy doing this... they are simply making their OS have more features... this is the way EVERY PRODUCT WORKS! Add more features and put out a new version or a new model. That's how you continue creating sales. But I forgot... everything should be open source and free... while that sounds good... that just ain't the way the world or business works.
I agree Linux is cool as well as all other products and in some cases I choose something other than microsoft... but for the most part their software works and those that have problems with it should change and quit bitching :)
This post was edited by Mr.Humpty on Friday, September 28, 2001 at 15:18.
|
#3 By
415 (199.8.64.79)
at
9/28/2001 5:28:38 PM
|
I wonder if the reason why everyone posts anonymously is because they have cookies turned off? Seriously, you can't logon as a user unless cookies are allowed. Or, are they just afraid to identify themselves? Afraid that MS will find out you're running a pirated copy of Windows? : )
Anyhow, this security issue has little to do with Passport. If you allow foreign, untrusted code to run on your PC, you will install a trojan, virus, or worm. And, those programs will have access to ANY data on your PC, even the stuff you are currently typing, no matter what security measures are put in place.
So, big deal if a function call in the Passport API passes a plain text password. Here's a news flash folks, that password MUST be in plain text somewhere in RAM for the computer to even use it!
And if you think MacOS, Unix, Linux, or anything Sun pulls out of there ass won't (or don't) suffer the same problems, you're in for big surprise!
Iron
|
#4 By
135 (64.214.58.1)
at
9/28/2001 5:50:49 PM
|
Criticizing Microsoft can and certainly is appropriate at times. I do it myself.
But the ridiculous blank anti-Microsoft bigotry which consists of nothing more than an unfounded "Microsoft sucks! I REWLZ!" is really unwarranted and it is not surprising you get shot down.
If you want to bleat with the other anti-MS sheep then you should go read slashdot.org...
|
#5 By
135 (64.214.58.1)
at
9/30/2001 3:18:34 AM
|
It's kind of amazing sometimes how out of touch people become when they only listen to people with similar views to their own.
#26 claims that only a minority of people are Pro-MS, yet every poll has consistently shown the majority of the US electorate is against this court case.
|
#6 By
135 (64.214.58.1)
at
9/30/2001 3:23:44 AM
|
Hmm, actually after reading #26's posting more carefully I think what particular disturbs me about it is the attitude that we shouldn't question our elected representatives.
Sometimes laws are stupid.
But in this particular case, it's not the law that is the problem, but how badly some people have misinterpreted it.
|
#7 By
135 (64.214.58.1)
at
9/30/2001 4:05:55 PM
|
Again #26 you are seriously misinformed.
Here you go:
http://www.usatoday.com/life/cyber/tech/cth601.htm
67% of the voting public feel the DOJ case is a waste of US tax dollars.
Politicians don't listen to voters very much. They listen to people who given them millions of dollars. That's been the point behind campaign finance reform.
What Microsoft has learned from this is if they don't give any money... and their competitors go out and give millions to politicians and buy up media companies(*cough* AOL *cough*) they lose the public relations battle.
And as to the power users. The people I know and talk to daily all agree that this trial is a sham. The more technically astute the individual, the more they realize just how stupid the government's case has been. Reading the findings of fact from Judge Jackson is solid proof of his utter incompetence.
|
#8 By
135 (64.214.58.1)
at
9/30/2001 5:39:58 PM
|
Heh. And you don't think AOL owning CNN and Time Magazine doesn't have a similar impact on the news you see and how you are supposed to think?
Why don't you explain to me, in detail, exactly how you, as a consumer, have been harmed by Microsoft.
I've been closely following this industry since '82 and I shudder to think about going back to the way things were even 5 years ago. Most of that has to do with the fact that, as consumers, we grew tired of the endless and needless incompatibilities and so we choose a vendor and stuck with it. That vendor happened to be Microsoft because they were most capable of delivering a quality product in a timely manner.
The things I find particularly disturbing about your attitude and that of others, is not just your supreme arrogance, but your motivation. I've yet to hear any suggestions on how to improve the industry, all I hear are suggestions on how to harm Microsoft.
It's that desire for vengeance which I find most troubling, because Microsoft hasn't done anything to you personally or even collaterally.
To be honest, the way the anti-MS brigade behaves reminds me a lot of Osama bin Laden and the other radicals who hate America, yet love what America gives them.
If you truly want to improve things, the whole industry has to be regulated. No more vaporware announcements, no more conflicting measurements(What's a Gigabyte?). If browsers can't be bundled with Windows, then they can't be bundled with any OS.
That will really create a level playing field.
So exactly what is it that you want?
|
#9 By
135 (64.214.58.1)
at
9/30/2001 5:41:10 PM
|
You can respond to me in email... ssheldon@sodablue.org. This news item is going to fall off the list, and I don't want to miss your reply.
|
|
|
|
|