Microsoft Has No Plans To Patch New Flaw

Trailrunner7 writes "Microsoft has acknowledged the vulnerability that the new malware Stuxnet uses to launch itself with .lnk files, but said it has no plans to patch the flaw right now. The company said the flaw affects most current versions of Windows, including Vista, Server 2008 and Windows 7 32- and 64-bit. Meanwhile, the digital certificate that belonging to Realtek Semiconductor that was used to sign a pair of drivers for the new Stuxnet rootkit has been revoked by VeriSign. The certificate was revoked Friday, several days after news broke about the existence of the new malware and the troubling existence of the signed drivers."

Comments

Re:Source?

[jwilhelm]

Microsoft statement via Technet blog:
http://blogs.technet.com/b/mmpc/archive/2010/07/16/the-stuxnet-sting.aspx

Re:Possible mitigation?

[cynyr]

lack of a *.lnk based root kit, the ability to audit the source, the lack of ability to run 99% of the viruses in the wild.[1]

Can you run any version of windows from something like a ramdisk, so there is no real way to write to the disk? how about the old, start the system up, shut it down, but leave iptables running router hack? A highly transparent bug/flaw reporting system, with a quick turn around?

If you hear of a mac mini pro, let me know. :)

[1]yes yes, all strawmen, but the issue for me is the last version of windows I used was XP. So I'm out of date.

Re:Possible mitigation?

[Saeed al-Sahaf]

Would you stop that free market bullshit?

It's ***NOT*** "free market bullshit". It's ***YOU*** taking control of your purchaseing and buying products that work for you, rather than bitching, moaning, and complaining about Microsoft. If you ***LIKE*** to bitch, moan, and complain, I imagine that you are married or getting a divorce. But most people AVOID bitching, moaning, and complaining. So buy stuff that works for you and leave the rest behind. UNLESS you are like RMS, and just like to BITCH MOAN AND COMPLAIGN about Microsoft.