Slashdot Mirror
Windows 7 Reintroduces Remote BSoD
David Gerard writes "Remember the good old days of the 1990s, when you could teardrop attack any Windows user who'd annoyed you and bluescreen them? Microsoft reintroduces this popular feature in Windows 7, courtesy the rewritten TCP/IP and SMB2 stacks. Well done, guys! Another one for the Windows 7 Drinking Game."
It's incredibly unlikely to ever affect anyo
http://twitter.com/onion2k
- Shiny-new interface.
- No annoying "are you sure" popups every 30 seconds like Vista.
- Can run on a 1 gigabyte machine without slowing to a crawl.
It simply wasn't possible for Microsoft to make such a great perfect OS without including a flaw.
"I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
Yeah, we read the first three lines of the Wikipedia link, too.
It is by my will alone my thoughts acquire motion; it is by the juice of the coffee bean that the thoughts acquire speed
...that my fellow Boston Public School graduates are writing for seclists.org.
Section V: "An attacker can remotly crash without no user interaction, any Vista/Windows 7 machine with SMB enable. "
Yes, because we been done had seen that explot in the pasts.
Dear $DEITY, are there no proof readers or editors alive on these sites?
Let me Loony Tunes that up for you:
Wabbit Season!
Duck Season!
Wabbit Season!
Duck Season!
Summation 2
Having actually tried this on three windows 7 machines now, ...
You must be popular with your coworkers.
No we didn't. Shut up.
Dammit Dad, you're such a buzzkill.
Or to be more apt (for slashdot)... some people prefer Ford, some prefer Dodge, others still prefer Toyota. Gas is better for some applications, while Diesel is better for others, while electric is better for others.
When a new car line comes out, new defects are to be expected on occasion. Sometimes there are even defects present that were fixed in previous models.
Digital cameras make for plenty of things worth finding.
well, now I know how to win any lan party contests :)
NOBODY EXPECT ATTACKS FROM INSIDE YOUR LAN!!!! Their chief weapon is surprise...surprise and fear...fear and surprise.... Their two weapons are fear and surprise...and ruthless efficiency.... Their *three* weapons are fear, surprise, and ruthless efficiency...and an almost fanatical devotion to rms.... Their *four*...no... *Amongst* their weapons.... Amongst their weaponry...are such elements as fear, surprise.... I'll come in again.
Rules of Conduct:
#1 - The DM is always right.
#2 - If the DM is wrong, see rule #1
Of course, the proper remedy for this (given that it is on a LAN) is to get up, walk down the hall, and beat the crap out of the douche-bag who's DoSing you. Really, the only reason DoS attacks work so well on the Internet is that the guys doing it are probably half-way around the world.
Rules of Conduct:
#1 - The DM is always right.
#2 - If the DM is wrong, see rule #1
Don't act as if users of other operating systems are less intelligent than you
Everyone knows using linux makes you smarter. If any, it'l learn you how to use google. Better even: it'l learn you how to use google without a graphics or network adapter working on your box.
(if you think this is a flame, think twice.)
Yeah, reading error on my part. Sorry about that. Let's give Vista credit where it's due!
http://rocknerd.co.uk
When this packet hits a pocket on a socket on a port,
Your whole damn OS pauses to abort...
kmem russian roulette: Aquillar> dd if=/dev/urandom of=/dev/kmem bs=1 count=1 seek=$RANDOM
My favorite SMB2 exploits are detailed here.
But Macs cost too much, and Linux is too hard. And Microsoft only hits me because he loves me.
http://rocknerd.co.uk
But I have fond memories of the exploit called Win Nuke to cause the BSOD. Back in the day, I was a freshman in college and a football player on our floor was continuously giving me a hard time. In those days, we telnetted into the DEC Alpha to check our email. Also, in those days our IPs were statically assigned and we had no firewall. Those were quite obviously better, more trusting days of the internet. Anyhow, one day I waited until I knew he was in his room and checking email from his computer. I used finger on UNIX to get his IP address. Then, nuke away! I could here him banging, cussing, and throwing his stuff around. So, whenever I needed a little fun, I simply delivered that little exploit. One day he came back from a drunken binge and went to check his email and I felt it was a perfect time to test his patience level. After carefully delivering the little packet, I heard a smashing sound. My guess is he decided to do a body slam, WWF style, on his PC. As I walked by I casually asked what happened as I saw the computer smashed to smithereens. He told me to, "Get outta here, shit nugget!" It was all I could do to keep from bursting out laughing. Moral: Leave the IT guy alone.
Why does the file sharing system in Windows rely on the cartoon baddie from Mario games ? Bowser, srsly ?
Well, it is SMB.
Userland should __NEVER__ be able to crash the OS, M$ fanbois are the reason Windows is as bad as it is! If this was Linux a patch would be issued in hours. See the deref 0 with page 0 mmaped exploit.