|
|
User Controls
|
New User
|
Login
|
Edit/View My Profile
|
|
|
|
ActiveMac
|
Articles
|
Forums
|
Links
|
News
|
News Search
|
Reviews
|
|
|
|
News Centers
|
Windows/Microsoft
|
DVD
|
ActiveHardware
|
Xbox
|
MaINTosh
|
News Search
|
|
|
|
ANet Chats
|
The Lobby
|
Special Events Room
|
Developer's Lounge
|
XBox Chat
|
|
|
|
FAQ's
|
Windows 98/98 SE
|
Windows 2000
|
Windows Me
|
Windows "Whistler" XP
|
Windows CE
|
Internet Explorer 6
|
Internet Explorer 5
|
Xbox
|
DirectX
|
DVD's
|
|
|
|
TopTechTips
|
Registry Tips
|
Windows 95/98
|
Windows 2000
|
Internet Explorer 4
|
Internet Explorer 5
|
Windows NT Tips
|
Program Tips
|
Easter Eggs
|
Hardware
|
DVD
|
|
|
|
Latest Reviews
|
Applications
|
Microsoft Windows XP Professional
|
Norton SystemWorks 2002
|
|
Hardware
|
Intel Personal Audio Player
3000
|
Microsoft Wireless IntelliMouse
Explorer
|
|
|
|
Site News/Info
|
About This Site
|
Affiliates
|
ANet Forums
|
Contact Us
|
Default Home Page
|
Link To Us
|
Links
|
Member Pages
|
Site Search
|
Awards
|
|
|
|
Credits
©1997/2004, Active Network. All
Rights Reserved.
Layout & Design by
Designer Dream. Content
written by the Active Network team. Please click
here for full terms of
use and restrictions or read our
Privacy Statement.
|
|
|
|
|
|
|
|
Time:
15:35 EST/20:35 GMT | News Source:
ZDNet |
Posted By: Byron Hinson |
Microsoft late Wednesday said a flaw in its Windows operating system could allow hackers to gain unauthorized access to thousands of computers. Microsoft issued a security alert, calling the flaw "critical." The flaw affects how more than a dozen Microsoft products, including programs for Windows and the Macintosh, handle digital certificates, which are used to certify the authenticity of a Web site or of software code.
|
|
#1 By
3339 (65.198.47.10)
at
9/5/2002 3:45:49 PM
|
"But the company has released patches for only four of the affected products: Windows NT 4, Windows NT 4 Terminal Server, Windows XP and Windows XP 64-bit Edition. Other vulnerable products include Windows 98, Windows 98 Second Edition, Windows Me and Windows 2000.
Six Microsoft Macintosh programs also are affected by the flaw: Office v. X, Office 2001, Office 98, Internet Explorer for Mac OS 8 and 9, Internet Explorer for Mac OS X and Outlook Express 5.05."
I thought MS didn't discuss flaws until they were patched; well, I guess 4 out of 15+ products ain't bad, good enough.
Sure feel bad for those Win 98 users who haven't been incensed to upgrade but won't be supported at all.
|
#2 By
3339 (65.198.47.10)
at
9/5/2002 4:18:18 PM
|
Quick answer: as long as it's a problem.
Besides, didn't it come out yesterday? Maybe I'm getting old--the speed at which you expect news to be published, propagated, and digested is too great for me. Newspapers (even with 2 daily additions) must be far, far too slow for you.
This post was edited by sodajerk on Thursday, September 05, 2002 at 16:22.
|
#3 By
2459 (24.233.39.98)
at
9/5/2002 4:20:04 PM
|
It's not that they don't discuss them, it's that they don't post any information that would aid crackers in utilizing the exploit.
There are frequently bulletins on TechNet and MS Security warning of vulnerabilities before there is a patch. They just don't want bug hunters to go public with info that could cause people's systems to get hacked before there is a fix available.
|
#4 By
3339 (65.198.47.10)
at
9/5/2002 4:25:02 PM
|
I know, I know, enforcer--currently, MS is talking about a bunch of problems that they don't have fixes for. ;-)
My point is: they have jumped on 3rd parties who have only informed about vulnerabilities without exploit code... They're security initiatives are a mess.
And apparently those audits missed a couple of nasty ones!!
This post was edited by sodajerk on Thursday, September 05, 2002 at 16:25.
|
#5 By
1913 (68.14.48.57)
at
9/5/2002 4:49:37 PM
|
AMEN, diaphanein.
|
#6 By
2960 (156.80.64.132)
at
9/5/2002 5:16:11 PM
|
Hey guys,
Off-Topic (I don't know how to start a subject, or if just anyone can), but the Microsoft Premeir site FINALLY has Windows XP SP1 available on the front page.
Grab yer official login's and go get some!
TL
|
#7 By
3339 (65.198.47.10)
at
9/5/2002 6:03:52 PM
|
Yes, by now, everyone should know that real world credit fraud is far easier than net fraud, but that doesn't excuse the flaw. And it especially doesn't exclude the fact that MS will not patch 98.
It's far easier and far more likely to take place in the physical world, but if you can develop an exploit, there is no limit to the amount of cc #s you can steal and fraud you can commit quite rapidly--whereas real-world thiefs can only steal as fast as you hand over your credit cards. With a large percentage of Windows' users still using 98 that's quite a target audience to commit mass fraud. Not to mention Mac users, Office users...
This post was edited by sodajerk on Thursday, September 05, 2002 at 18:05.
|
#8 By
135 (209.180.28.6)
at
9/5/2002 6:29:29 PM
|
I see chicken little is visiting us today again.
|
#9 By
3653 (63.162.177.140)
at
9/5/2002 6:56:32 PM
|
Looks like Larry Ellison (sodajerkoff) is back from vacation.
|
#10 By
3339 (65.198.47.10)
at
9/5/2002 7:02:59 PM
|
Uhh, the brilliant witticism of mooresa, oh, how I missed you too. What the hell does the Larry Ellison bit mean anyway? Has anyone really heard much from him in over a year? Are you obsessed?
Bob (you know who, but I won't say), see what you started? You brought me back with a vengence, I guess.
|
#11 By
3339 (65.198.47.10)
at
9/5/2002 7:35:00 PM
|
What's so chicken little aout what I said? Yes, it is well known that you can more easily steal a cc physically; it is equally well known that you can steal more cc's and more quickly electronically.
MS themselves are stating that they aren't patching Win 98; a decision that I anticipate they will change but will drag their feet on.
|
#12 By
116 (66.69.198.173)
at
9/5/2002 8:05:00 PM
|
Patch is now available for windows 98, 98se, and ME.
Any more crystal ball predictions for us SodaJerk?
LOL
|
#13 By
3339 (65.198.47.10)
at
9/5/2002 8:07:29 PM
|
Red, they told ZDNet they weren't going to patch it. I said that it would be important that they did and they would. They did. Where was I wrong? Dragging their feet? Okay.
|
#14 By
1845 (12.254.162.111)
at
9/5/2002 8:07:39 PM
|
I apologize, ActiveWin community. He's as bad as fewt was on Betanews. I've decided to ignore him in the hopes that he'll go away again. Hmm, bob670 appeared when jerk disappeared. Now jerk is back on bob670 is gone. Both of them are as ravingly illogical as .139 was of yesteryear.
|
#15 By
3339 (65.198.47.10)
at
9/5/2002 8:35:28 PM
|
Boy, Bob, you are a great detective. I was calling Bob670 a fool yesterday the same I'm doing to you today.
|
|
|
|
|