Posted on 01/02/2006 3:54:03 PM PST by Swordmaker
Computer security experts were grappling with the threat of a newweakness in Microsoft’s Windows operating system that could put hundreds of millions of PCs at risk of infection by spyware or viruses.
The news marks the latest security setback for Microsoft, the world’s biggest software company, whose Windows operating system is a favourite target for hackers.
“The potential [security threat] is huge,” said Mikko Hyppönen, chief research officer at F-Secure, an antivirus company. “It’s probably bigger than for any other vulnerability we’ve seen. Any version of Windows is vulnerable right now.”
The flaw, which allows hackers to infect computers using programs maliciously inserted into seemingly innocuous image files, was first discovered last week. But the potential for damaging attacks increased dramatically at the weekend after a group of computer hackers published the source code they used to exploit it. Unlike most attacks, which require victims to download or execute a suspect file, the new vulnerability makes it possible for users to infect their computers with spyware or a virus simply by viewing a web page, e-mail or instant message that contains a contaminated image.
“We haven’t seen anything that bad yet, but multiple individuals and groups are exploiting this vulnerability,” Mr Hyppönen said. He said that every Windows system shipped since 1990 contained the flaw.
Microsoft said in a security bulletin on its website that it was aware that the vulnerability was being actively exploited. But by early yesterday, it had not yet released an official patch to correct the flaw. “We are working closely with our antivirus partners and aiding law enforcement in its investigation,” the company said. In the meantime, Microsoft said it was urging customers to be careful opening e-mail or following web links from untrusted sources.
Meanwhile, some security experts were urging system administrators to take the unusual step of installing an unofficial patch created at the weekend by Ilfak Guilfanov, a Russian computer programmer.
Concerns remain that without an official patch, many corporate information technology systems could remain vulnerable as employees trickle back to work after the holiday weekend.
“We’ve received many e-mails from people saying that no one in a corporate environment will find using an unofficial patch acceptable,” wrote Tom Liston, a researcher at the Internet Storm Center, an antivirus research group. Both ISC and F-Secure have endorsed the unofficial fix.
Microsoft routinely identifies or receives reports of security weaknesses but most such vulnerabilities are limited to a particular version of the Windows operating system or other piece of Microsoft software. In recent weeks, the company has been touting its progress in combating security threats.
The company could not be reached on Monday for comment.
The more people you brag to, the more likely you are going to jail. As any LEO will tell you.
It's one thing to have little or no appreciation for a system that is "different" from your experience. It's quite another to have a visceral, emotional need to insult, belittle and alienate others over our preference for a system that is every bit as useful to us as your little home-built concatenation is to you.
I have used Macs since 1986, and I have never wished I had a PC instead. It has an elegant interface, powerful hardware, and everything I need to do my work. How is that such a threat to you that you have to refer to it as a "boat anchor"? (and by the way, they haven't been beige for years.)
Are you really so unknowledgable about such things that you believe that the cretins who build these things don't communicate with each other?
...or teal.
Sometimes?
Teal is a species of duck. Not a color. :-)
Are you ducking the issue, or making an issue of the duck? ;^)
Well, heck. There's Linux for that and IT'S FREE!
LOL. I don't think I'll ever find the time to learn enough about Linux, although I've heard a number of good things about it.
Or, in the case of Mac OS, one that costs about four times more than it should and do four times more than it should.
It's quite another to have a visceral, emotional need to insult
Or in your case a visceral, emotional attachment to a hunk of silicone/hatred for Bill Gates.
And I didn't insult you. "Mac fanboy" is a general term used to refer to someone who is inordinately attached to their mac.
I have used Macs since 1986, and I have never wished I had a PC instead.
Maybe not, but I bet you wish you had some of that money back that you could have saved.
It has an elegant interface, powerful hardware, and everything I need to do my work.
I have all that AND mine also runs more software, is faster, easy and cheap to upgrade, and cost about a third as much. Don't cry.
How is that such a threat to you
Why do you think that everyone who doesn't agree with you must be "threatened?" Seems to me your failure to address my original points about your inferior machine indicate that you feel threatened and/or regretful.
that you have to refer to it as a "boat anchor"?
It IS a boat anchor.
(and by the way, they haven't been beige for years.)
I said they were teal. As if changing the color made them better or something.
Once again, that is one way LEO's catch perpetrators. They cannot keep their big mouths shut.
BTW, teal is also a color. http://en.wikipedia.org/wiki/Teal_(color)
Get back to me when you can argue from some experience. Til then, enjoy your hobby.
Yes, it is one way they catch folks. Unfortunately, they apparently don't appear to be doing a good job of it with these punks so far. Your initial comment was:
Hm, you can't exactly brag about doing something illegal like writing viruses when the bragging will send you to jail.
Duh.
Just because it is not the most intellegent thing for them to do does not mean that they don't do it. Many also make use of pseudonyms and are adept at hiding the true source of their comments. There are ways to do this very effectively, and they are used extensively.
If there were effective attack vectors against Macs and the various flavors of Linux out there, you can bet that someone would be scrambling for the bragging rights that would go to whoever created a novel worm/virus that was able to spread even somewhat efficiently. Earlier, I posted an example of a worm that attacked a target of just 15k hosts worldwide. Are not the several million Mac/Linux users out there a much bigger target than that?
The comment about "teal" was a joke to the poster. Did you not see the ":)" which, in general terms indicates the comment is not to be taken entirely seriesly? Lighten up, Francis.
In other words, you cannot address my response because it's true. Your machine is overpriced (although if it's useful to you, more power to you).
and that I am somehow jealous because your PC will run more virus protection systems than my Mac will (or will ever have to).
It runs more in general. Face it, all your machine has going for it is that people don't care to write viruses for it. If I make a pros and cons list, having one positive attribute in the pro column doesn't exactly win me over.
I have not expressed any hatred for Bill Gates.
Many Mac people do. In fact, many Mac people base their decision to run a Mac on the fact that they hate Bill Gates because it's the only reason that actually makes sense.
I simply prefer the Mac to the PC for the kind of work I do, and that, in your mind, is apparently indicative of a huge mental deficit on my part.
It's indicative that you wasted your money. But it is your money. More power to you.
I find that insulting,
Too bad. If something I said about Mac v. my custom PC was factually incorrect, feel free to bring it.
considering the fact that I have spent more time working with PCs than you will ever dare to put in on a Mac.
Then you know that every word I said is true. End of story.
I have my preference, and that is all.
Wonderful. Just don't pretend it's based on common sense.
I think it is worth a few extra bucks
It's a lot more than "a few extra bucks."
to get the quality, reliability, and speed (yes, I said speed) that comes with a Mac.
Your Mac is not faster, higher quality, or more reliable than a PC. Sorry. They lied to you.
Your insistence on claiming that they are somehow worthless pieces of junk makes no sense,
I didn't say they were worthless pieces of junk. But you don't get very much for what you pay.
and strikes me as more of an emotional argument than one based in any reason.
I think my statements about my PC's performance, versatility, cost, and upgradeability don't exactly fall under the "emotional" category. Your failure to address these points, however, does.
You have attributed to me some level of regret over money spent on my Macs over the years.
I think anyone who spends more than $700 for a computer, ANY computer, SHOULD feel some regret since you can build a better machine for a fraction of the cost. Maybe you have money to throw away. Most of us do not.
You seem to believe that Mac and Linux OSs must be secure because no viruses have been written for them--as if creating viruses for them is impossible.
Maybe it really isn't worth anyone's time. Occam's Razor, don't you know.
Snarks, you're a marvel!
Cheers!
I'd buy a Mac, but I'm not gay.
Absolutely, and yes, incorrect, and ignorant, and unwilling to learn.
So you DON'T really feel attached to/and or any allegiance to your Mac, then?
Why did you buy it?
and unwilling to learn.
You didn't teach me anything I didn't already know.
Actually, neither of those assertions are true.
The fact is: Macs are not invulnerable, but Mac OS X is engineered to have superior security by design.
Every day, more people are realizing that Microsoft Windows is a hopeless piece of low-quality crap.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.