Please, people NIPC has done very little and very rarely makes comments like this -- this is a very serious hole.
RMD, they never meant for this to be a big announcement? Baloney! When else has NIPC and the FBI ever commented on a security problem with a non-MS piece of software? You all whine about the Feds spending money to prosecute MS, well, I've got a problem with them researching MS's security problems and getting the word out for them.
And Paul's got it wrong again... the Register (flame on) actually spoke with the guys who reported it, and in fact, they reported the flaw the day after XP was released. MS sat on this for 2 months.
Jugulator, of course you don't use UPnP; there are no 3rd party hardware products that use it -- that just shows how pathetic MS is about security: great, whizz bang, our products can do this or that even though nobody wants it or needs it, but it does leave a great big remote network security hole though! Please buy -- it's our best product ever!
What's up with you guys and Magic Latern; you're trying to act all balls out hack and privacy nuts, but you run MS software? Get a life!
|