Slashdot Mirror
New Microsoft Worm Coming Soon?
Seft sent in a solid article running on the BBC discussing the next potential worm explosion on the heels of a recent
Security Bulletin from Microsoft. The article is a somewhat general topic piece on worms in general.
...Scientists predict the sun will rise tomorrow.
on the heals of a recent Security Bulletin from Microsoft
Apparently, the worm infects the user's grammar-checker, rendering it inoperable.
...that the next worm explosion heals the recent Microsoft Security Bulletin. That will be a welcome change, coming on the heels of the last big Microsoft worm.
"Malicious hackers are starting to circulate computer code that exploits recently found vulnerabilities"
Starting? When was this article written 1993?
Gee thats like say new windows security patch coming soon
"Its too hot out for a Penguin to be just walking around. - Billy Madison"
All my friends and family use Worm 9.0! It's easier than ever!
Its a shame the only people who read these articles are the ones who aren't affected in the first place.
A pre-worm article
A current worm article
And a post-worm article?
Essentially three times the FUD, bashing, turfing, and... well, slashdot.
A winner is you!
The Sun is scheduled to rise in the east tomorrow morning...
WTF? Over?
Either MS is stupid and hasn't put up the patch for win2k pro yet, or I got this ages ago.
Good to know.
I'm sure GWBush is despreatly looking for an "evil nation" that can "bring it on".
But then I find US and China having any kind of hostility highly unlikely.
China exports so much to the US that they'd fall over backwards and cry if the US put on a trade embargo. No shots need to be fired.
In Soviet Russia, the television watches YOU!
"Windows 98, Windows 98 Second Edition (SE), and Windows 95 also are not affected by this issue." So we can save ourselves by downgrading to previous windows versions? Or is this just a shameless plug? "However, these products are no longer supported. Users of these products are strongly encouraged to upgrade to later versions." Yup. It's a plug for newer, even more vunerable software, alright.
10 Bits= $.25
100 Bits= $.50
110 Bits= $.75
1000 Bits= 1 byte
Tra la la ...we're goin' 'round the good ole 'net.
hey guys looky there, a new network let's swamp it, I say
*swamp swamp swamp*
ha ha ha ha ha ho ho ho ho ho hee he he he what fun!
*happy singing*
here we go around the good ole net
good ole net
good old net
hi fellas, guess what I found! A nice clean M$ server
Yaaaay!!!
Here we go *infect infect infect*
Haa ha ha ha ho ho ho ho hee hee hee hee What fun!
An Indian-American Hindu committed to non-violent thought/speech/action alarmed by the global explosion of radical Islam
There's a new worm out there that exploits a security hole still in Windows 2k/XP from when it was released.
It has the capability to shut down applications, goes right through anti-virus software (even the latest patches!!!), and gives total control of the victim computer to the creator of the worm.
An attempt by the powers that be to shut down it's source of updates was thwarted by various government agencies and the worm itself.
Unfortunately there is no patch to get rid of the W32.MS.AutoUpdateRequired worm.
In Soviet Russia, Russia is the new China!
I was just on my way to microsoft.com to get the patch, when I realized I was running Debian. :D
Well then I'm going to meta-meta-meta mod you! Ha! How do you like that!?
since you read slashdot, no, that worm probably hasn't been used enough to be infected by anything.
- The article is a somewhat general topic piece on worms in general.
Since General Wesley Clark has entered the general Democratic field for the next general election, it's been generally assumed that general technical issues like this one would be handled with somewhat general ease by applying the general security practices to used by the general public, in general.I believe this all refers to MS03-039, released on 9/10/2003. If you've updated your system since last Wednesday, you're protected and the patch won't show up as a Critical Update, because you've been scanned and MS has determined that you're already patched.
Of course, if you're using Linux and you go to the Windows Update site, you won't find any critical updates for your system there either.
I'm surprised we haven't seen worms doing more interesting tasks than coordinated DDOS attacks... Think what would happen if a worm spread some sort of simple P2P client to every machine it hit, and just initiated random downloads of mp3's from other worm-infested nodes (and maybe users could make a "suggested downloads list" through a config file somewhere). The RIAA would get dizzy trying to find a target to sue...
i'm sure all the macintosh users were as frusterated as her.
>> I, for one, welcome our new worm Overlords.
:(
With that attitude, the movie Dune would have been a lot more boring.
What would be a good value for x?
X would clearly be PC dependent for optimum worm spread. An obvious thing would be to deliver the fatal payload after the infection had spread to, say, 15 other PC's. This would cause exponential spread until the number of vulnerable machines became limiting.
But thats *boring*. A much more twisted & evil thing to do would be to deliver a payload at a mission-critical point. For example, after MS Word had been used excessively over a few days, and the word CONCLUSION was typed in.
Go further down the rabbit hole. Ask yourself if China is this bad AND has nuclear weapons why was Iraq invaded while China's a preferred trading status country?
I just happen to have a TRS-80 Level II Basic program in front of me:
10 Data "China", "yes", "yes", "Iraq", "yes", "no"
20 Read Country$, Bad$, Nuke$
30 If Bad$ = "yes" then Print "We must deal with "; Country$
40 If Bad$ = "yes" and Nuke$ = "no" then Print "Invade Evil "; Country$; "!!!"
50 If Bad$ = "yes" and Nuke$ = "yes" then Print "We will constructively engage "; Country$; " with trade."
60 GOTO 20
Stressed? Me? Of course not. Stress is what a rubber band feels before it breaks, silly.
However if you work in an environment with mission critical apps that cannot fail, you can't just simply "patch your systems".
I have to ask, why the hell would you be running anything remotely "mission critical" on windows in the first place???
Code, Hardware, stuff like that.
The protocol itself is derived from the Open Software Foundation (OSF) RPC protocol, but with the addition of some Microsoft specific extensions. i.e. vulnerabilities
From Microsoft:
Note Windows 98, Windows 98 Second Edition (SE), and Windows 95 also are not affected by this issue. However, these products are no longer supported. Users of these products are strongly encouraged to upgrade to later versions.
WTF? How this translates to me - "If your computer is immune from these new strains of virii you are strongly encouraged to make it vulnerable."
"Am I the only one who noticed that the woman in the BBC Article's picture (directly above the "The MSBlast worm hit some users hard" Caption text) is using an old mac,"
The virus turns your PC into a Mac?! Now that's a creative way to hit users hard.
"Derp de derp."
Typical. Pre-announcing vaporware just to hurt competitors' sales.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
In communist China, the viruses write you!
Need Free Juniper/NetScreen Support? JuniperForum
out of data error...
> Even if you do learn to speak correct English, whom are you going to speak it to? -- Clarence Darrow
Friend, you mean, "Even if you do learn to speak correct English, to whom are you going to speak it? -- Clarence Darrow"
I'm too lazy to compose a creative sig.
New MS worm coming soon?
/. for our exclusive discovery that the sun rises in the morning, and diappearing in the evening.
Read tomorrow's
AP WIRE(less), 18-Sep-03. Microsoft Corporation president Steve 'Balmy' Ballmer announced today the formation of a new subdivision of the company which will specialize in the production and marketing of exploits for the Windows operating system.
"All we're doing is catering to existing demand" Ballmer said during a press conference. "People want this stuff as much as they want Windows, and we're the best choice to make the exploits available. After all, we know better than anyone how many bugs are in our own code..."
The first official release of the Windows Exploit Advantage Kit, or WEAK, is scheduled to take place on December 42nd. When questioned about the date, Mr. Ballmer had this to say; "It's our way of honoring the late Douglas Adams. Even if that weren't enough, it turns out that the number of bugs in Windows, divided by half the number of years before our sun goes nova, equals exactly 42. What could be more appropriate for a release date...?"
Bruce Lane, KC7GR,
Blue Feather Technologies