Businesses Urged To Use Unofficial Windows Patch
frankie writes "ZDNet is reporting on the latest dire pronouncements about the WMF vulnerability. The problem is so serious that security experts are urging IT firms to use the unofficial patch. Microsoft's current goal is to release the update on Tuesday." From the ZDNet article: "This is a very unusual situation -- we've never done this before. We trust Ilfak, and we know his patch works. We've confirmed the binary does what the source code said it does. We've installed the patch on 500 F-Secure computers, and have recommended all of our customers do the same. The businesses who have installed the patch have said it's highly successful" It's big enough that even mainstream media is covering the flaw.
This'd be a hell of a lot easier if they'd just give over the source code already.
Presumably they do some sort of testing with their patches before they release...
- chrish
Its ok, I found th...!&^!")NO CARRIER
liqbase
Gah! Too late! You've been hit by the WMF image virus already!
Kirk: Fix the WMF hole!
...
Let me guess: Tuesday?
Microsoft (Research) said in a security bulletin on its Web site, "we are working closely with our antivirus partners and aiding law enforcement in its investigation."
Cool - law enforcement is investigating Microsoft? About time!
get a rope!
There is much cruelty in the universe, John.
Yeah, we seem to have the tour map.
The problem is so serious that security experts are urging IT firms to use the unofficial patch.
Do I have to install Wine first?
Please help!
Million Dollar Screenshot
Our commitment is to protect all customers in all languages on all supported products at the same time, so it becomes a huge undertaking.
So in other words, we won't release a cure for cancer until we have cures for all other diseases as well.
Then: Microsoft sucks because they use file extensions!
Now: Microsoft sucks because they don't use file extentions!
https://www.accountkiller.com/removal-requested
the testing will be signed off as soon as the patch breaks one or more of the following: iTunes, Samba, GoogleDesktop, Palm Desktop... they only care about testing against their own applications, breaking third party programs in the process is a bonus, breaking old versions of ms apps while not breaking the latest versions is a double bonus... as it forces an upgrade
Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
I'd be filing a patent on "a technique for patching security vulnerabilities relating to images"...
...zero-day
SETABORTPROC Escape
Linux geeks are not afraid.
IDS, thanks for playin'
Unofficial patch burn
World serves its own needs
Dummy serve your own needs.
Feed the news from ISC,
Go insane
The blogs all start to clatter
With fear fight down height.
Wire is on fire
On a new years' holiday
And the mafia for hire
At a pharma site.
Tuesday now it's coming in
A hurry with the worries
breathing down your neck.
Team by team the coders baffled,
trumped, tethered cropped.
Feature? That's insane!
Fine, then. Uh oh,
A week 'till it's released to you
But it'll do
Unregister a DLL
World serves its own needs,
Patch this at your own speed
Crummy packet capture
And it's never quite
Right, right.
Admin now an alcoholic
Can't take bright light
Feeling pretty tired.
It's the end of the world as we know it.
It's the end of the world as we know it.
It's the end of the world as we know it and I feel fine.
they found the Weapon of Mass Frustration
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
The next big Windows worm will be unleashed on a Wednesday.
When can I expect a patch for Windows for Workgroups 3.11?