Slashdot Mirror
Yet Another Critical Windows Flaw
Dynamoo writes "Microsoft released yesterday a whole bunch of critical security updates. Out of these, MS03-043 is a flaw in the Windows Messenger Service (not MSN Messenger) with the possibility of a remote attacker gaining complete control of a Windows NT/2000/XP/2003 based PC remotely. If this sounds like another possible vector for a worm to spread, you'd probably be right. Microsoft's recommendation is to 'disable the Messenger Service immediately and evaluate their need to deploy the patch'. Of course a firewall will offer some protection but shouldn't be relied on. At least administrators can disable the Messenger Service remotely. Of course this is another headache for admins still patching for last month's RPC flaw."
This time, please do something really useful, not only doing such silly thing as DOS'ing windowsupdate
You can for instance, delete necessary files for Internet connection... in this case Microsoft will be in a *real* shit if nobody can connect the internet to download patches!
They'll maybe have to send MILLIONS of CD by mail!
Therefore, people will be *really* annoyed and may think it's time to switch to another more reliable OS.
A friend of mine recently said: "the only way to get a security hole fixed in Microsoft software is to write a worm that exploits it".
A monkey is doing the real work for me.
Could I get your IP address please?
Insert offensive troll-style sig here. Please mod or respond appropriately.
Microsoft discovered a MAJOR flaw in their naming convention. It seems it's far too easy to confuse MSN Messenger with Windows Messenger do in part they are both called Messenger, also due to the fact that Windows Messenger isn't widly used, except by sys/net admins telling their users the system is going down.
Getting users to actually peform updates when they don't have the ability to tell the diffrence between the diffrent products has proven to be most troublesome to Microsoft.
This flaw was noticed by technical support when users asked for assistance with "outlook" not knowing that "express" was a diffrent product. Not to speak of the diffrences between Windows Explorer, Microsoft Explorer, and the new hardly ever works MSN explorer.
"The idea that users know the diffrence between Windows, Microsoft, and MSN is ridiculous" --- typical power user.
A new convention is required based on the following facts
Windows - the operating system side of things
Microsoft - the software side of things, stuff you actually use
MSN - the ISP side of things, fluffy click shit that causes your computer to crash and burn.
Renaming should be as follows
Dont touch me crap - reserved for operating system level software
Play with me crap - the software you typicaly get to do stuff
Can't do crap - the stuff internet related that never works right
Now saying that there are patches for the "don't touch me crap messenger" has some meaning to the average user, vs their "Can't do crap Messenger" product.
This message was brought to you by Microsoft Crap, where did your document go today?
There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
At least administrators can disable the Messenger Service remotely.
:-)
If you haven't patched yet, I'm guessing anyone can disable your services remotely.
You'll never be locked out with Microsoft. We make windows that anyone can open from the outside.
Terrycloth Lobster