Slashdot Mirror
System Exploitable With USB
Anonymous Coward writes "Vulnerabilities in USB drivers for Windows could allow an attacker to take control of locked workstations using a specially programmed Universal Serial Bus device." From the article: "The buffer-overflow flaw is in device drivers that Windows loads whenever USB devices are inserted into computers running Windows 32-bit operating systems, including Windows XP and Windows 2000, said Caleb Sima, chief technology officer and founder of SPI Dynamics."
Every time I bag out Microsoft, some git comes to their defence, telling me it's all hype, they're unfairly picked on, that bill gates donates lots to charity, so MS is OK.
And yet more MS insecurities pop up.
*yawn*. I'm sick of being right.
A: No. Of course not. Well... okay sorta. If you buy Microsoft DRM [t.m.] Technology Approved USB Devices you'll be just fine. Oh and by the way, Microsoft DRM [t.m.] Technology Approved USB Devices will be required for all USB usage under Windows Vista. It's for the benefit of You, The Customer [t.m.]specifically. Honest. No attempting to lock you out of moving your content elsewhere, no sir.
I'm pretty sure they only mean XP, considering that Windows 2000 won't be able to use the brand new l33t IE7. With security enhancements that are only possible using the Windows XP operating system! ALSO user of IE 7 may not be able to view half the websites on the internet, but at least they are secure, unless they have a usb device!!! :)
See it here"
In this case:
TheGeek: I'm going to plug in this USB device.
TheGeek (take aback): Woooooaoooooo!!!
Bill: Urmm..hehee, yes...that's the single sign on feature we have.
in Windows NT!! :)