Microsoft Has No Plans To Patch New Flaw

Trailrunner7 writes "Microsoft has acknowledged the vulnerability that the new malware Stuxnet uses to launch itself with .lnk files, but said it has no plans to patch the flaw right now. The company said the flaw affects most current versions of Windows, including Vista, Server 2008 and Windows 7 32- and 64-bit. Meanwhile, the digital certificate that belonging to Realtek Semiconductor that was used to sign a pair of drivers for the new Stuxnet rootkit has been revoked by VeriSign. The certificate was revoked Friday, several days after news broke about the existence of the new malware and the troubling existence of the signed drivers."

Comments

Re:Possible mitigation?

[beelsebob]

Yes, that's working out really well for Motorola's publicity department with the Droid X just now.

Re:Source?

[complacence]

Here's a picture of a pony:
http://babybird.files.wordpress.com/2009/08/pony.jpg

What are you trying to do here? There still is no outright refusal to fix this.

Instead it says:

We will continue to investigate the vulnerability and, upon completion of that investigation, we will take appropriate action to protect our customers.

Re:Source?

[jesset77]

Here's a picture of a pony: http://babybird.files.wordpress.com/2009/08/pony.jpg [wordpress.com]

Gah, whyfor are things (badly) photoshopped out of the left and right sides of that image?

Stalin, is that you?

Re:Possible mitigation?

[PopeRatzo]

let me see what my medicated brain can re-think.

Did you bring enough to share with the whole class?

Re:Careful with that idea...

[X0563511]

Welcome to the world of ATI-Fail. Enjoy your stay

Re:Possible mitigation?

[Galactic Dominator]

So unsigned drivers cause rape?

That is the fattest straw man I've ever seen.