Slashdot Mirror
Google Researcher Issues How-To On Attacking XP
theodp writes "A Google engineer Thursday published attack code that exploits a zero-day vulnerability in Windows XP, giving hackers a new way to hijack and infect systems with malware. But other security experts objected to the way the Google engineer disclosed the bug — just five days after it was reported to Microsoft — and said the move is more evidence of the ongoing, and increasingly public, war between the two giants."
Quick, someone make an exploit that installs IE8 or Chrome.
...leverage a flaw in Windows' Help and Support Center...
This service is turned off be default on all systems I manage both as part of initial installation; and where possible by Group Policy. Just another parasitic service which is not necessary....because everyone just uses Google anyways.
You should turn off everything you don't need but if you turned off every insecure component of windows you would be left with a machine just running its BIOS.
What?? Given Microsoft's history of fixing their bugs, I would of released it as a 0-day instead of a 5-day! Google's just doing everybody a favor. Looks at all the other companies that are afraid of angering MS. Don't forget that Google's recent security breach is directly because of MS products.
:. Ultimate Control Dedicated/VM Servers
we all know the bug have been around for years, a lot of people use it as their primary operating system
OP didn't mean the bug in MS's accounting sheet!
Do this AFTER you release Chrom[ium] OS. Then users have something to defect to...
Slashdot's rate-of-post filter: Preventing you from posting too many great ideas at once.