Slashdot Mirror
Honeymonkeys Discover Undisclosed Vulnerability
spafbnerf writes "Securityfocus is running an article on Microsoft's honeymonkey project, previously covered on Slashdot. In early July 2005, this project discovered its first exploit for a vulnerability that had not been publicly disclosed, the JView profiler vulnerability which Microsoft announced later that month. "
I have no idea what Honeymonkey is, what Windows is, or even who Microsoft are.
BUT....Damn "Honeymonkey" is such a cool codename. I'm going to name my firstborn after it!
Aha, the new MS OS development team has been revealed: an infinite number of honeymonkeys at an infinite number of typewriters...
Explains a lot...
Microsoft has identified 752 specific addresses owned by 287 Web sites that contain programs able to install themselves on a completely unpatched Windows XP system.
I don't think I have a stronger word than DUH!
So Microsoft has a room full of computers that do nothing but automatically surf the "questionable" parts of the web? Anybody wanna guess how many hours a day that room is packed with employees just sitting in front of a computer "doing nothing"?
Even a monkey can find a flaw in Windows.
Honeymonkey? That's almost as bad as "Microsoft Certified Systems Engineer". Probably just as worthless too.
Oh, so a honeymonkey goes swinging around does it? You say that almost as if it's normal for honeymonkeys to swing around.
I can't imagine that there is any real attraction, seeing a monkey swinging through the trees, whereby people would line up to attack it. And how does it mix with honey?
I suppose that if you dunk the monkey in honey then some people may want to grab it and suck it - only if they're ravenous, I would have thought.
Linux/Open Source/Anti Microsoft News
The approach we took was to collect an initial list of 5000+ potentially malicious URLs by doing a Web search for Windows "hosts" files [HF] that are used to block advertisements and bad sites, and lists of known-bad Web sites that host some of the most malicious spyware programs
Kinda like testing condoms with hookers.. only your condom is made by MS...
How many courses would I have to take to become a
Microsoft Certified HoneyMonkey
You can't talk about Wikipedia's flaws on Wikipedia
Yeah, but using sheep for mine detectors is much more fun than a bird in a cage.
If the bird dies, you get nothing.
If the sheep dies, you get a new pair of Napoleon Dynamite sheepskin boots!
I bet the guys back then were hunkered down, saying, "come on...just a little further...sniff it out buddy...that's right", meanwhile they were placing bets on how far the sheep would go. It sounds like a fun win-win situation!