Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft Patches Fix IE, Sony Flaws

Posted by Zonk on from the friendly-software dept.

An anonymous reader writes "Microsoft issued two security updates today, one of which fixes at least four flaws in its Internet Explorer browser, including one for which an exploit was released over Thanksgiving that is now being used by a handful of porn sites to install spyware, etc. According to Washingtonpost.com, the IE patch also removes a component left behind by a patch from Sony BMG designed to remove some of the more dangerous features of anti-piracy software installed by Sony BMG music CDs. Researchers found that the Sony patch changed settings in IE so that any Web site could install software on those machines."

4 of 174 comments (clear)

  1. Strange by Anonymous Coward · · Score: 4, Interesting

    This is the first update in ages that requires a reboot, is the Sony rootkit that destructive?

  2. Re:...still waiting for service pack ZONKZonk-1.0. by Kelson · · Score: 4, Interesting

    Open Slashdot->Preferences, then go to the "Homepage" tab, then look under "Customize Stories on the Homepage"

    You can disable Zonk right there -- his posts will never reach your browser again. (This is compatible with all web browsers I've tested, though you have to enable cookies. But then cookies are such delicious delicacies, you have to wonder why anyone would want to disable them other than being on a diet.)

    There's only one problem, though: This patch requires you to register with Slashdot. One wonders how responsible it is to require personal information (I hear they actually want a username and a password! At least you can use a throw-away email address) in order to use this valuable functionality.

  3. Actually, it gets better by TheSpoom · · Score: 4, Interesting

    Microsoft should now have released a patch to Microsoft Antispyware and also have their monthly Malicious Software Removal Tool (which customers running XP Automatic Updates will have automatically run) detect and delete the Sony rootkit. IMHO, very cool (if they did it, can someone confirm?)

    I submitted an article about this a few weeks ago, it was rejected for some reason. Probably too many Sony stories already. ;^)

    --
    It's better to vote for what you want and not get it than to vote for what you don't want and get it.
    - E. Debs
  4. Wow, should MS be sued under the DMCA? by mixonic · · Score: 5, Interesting

    Neat!

    So, since MS is keeping Sony from installing their "DRM" spy^H^H^Hsoftware, you can say they are circumventing Sony's DRM software, PLAINLY against the DMCA. The only question is.....who do we cheer for when evil sues evil over evil with evil laws?

    -mix