Exactly what I don't get of this. When tracking the adobe exploits I saw several for Foxit pop up. The guy is basically advising security through obscurity. Foxit definitely released patches quicker than Adobe, but the vulnerabilities were still there...
This is pretty much true for everyone with a PDA phone. My HTC Hermes requires a nightly charge with the standard battery, though I use an extended battery to last two days. Everyone I know that owns an iPhone has to charge it every day. I know two people that have to carry around a special holster with a built in battery to charge their phone before they get home for the day.
I'd probably disagree with the quality of the movies, but I haven't really watched them more than once. Futurama was a great 22 minute dose of comedy that I could flip on while I'm eating a big bowl of Golden Grahams. The movies are much harder to just strap in for a while...although the broken out comedy central versions made it a little better.
I'm really hoping they return to the show format...I think they still have it, they just had to do too much for the movie format.
Really, I didn't know Windows 7 was fully documented. You'll have to send me all the info you've got on Windows Resource Protection, because it kinda sounds like they made some changes to it. Or maybe they didn't and they did get paid off by Adobe. Or maybe it's just beta software and something got all messed up. Or maybe the crack doesn't work with Win7.
Who's to say that Microsoft is just protecting installed DLL files, not necessarily per any vendor's request? Locking down the OS to make it more secure and all that stuff people rag on them for. Just sayin.
I'm fully aware both links when to the same page. However, these days Autoplay != Autorun. Autorun is the setting that parses the autorun.inf file when media is inserted and runs whatever it's told to. Autoplay searches inserted media for audio/video/picture files and ask if you want to launch them in their respective player/viewer. Both bring up the same prompt (depending on your settings), but both perform different functions.
Yeah, the US-CERT bulletin linked in the summary does actually disable processing the autorun.inf file. DISA put forward the recommendation last month to change that setting. I've tested it in the lab at work and it seems to do the trick.
I think everyone is taking this thing way over the top, the registry key setting has been known for a while now, as evidenced by this 2007 article. Users, the industry, etc just love to hate Microsoft and create panic to generate web hits. Granted MS could have came forward right away and said "in addition to the patch, make this regedit to really make sure you're safe", but it is what it is.
Holy smokes, I even bolded it for you! Let's try this again, with even more formating!!
One article is for disabling Autorun on CD-ROMs specifically. One article is for disabling Autoplay.Neither article describes how to stop the autorun.inf file from being processed on all removable media, nor does either article claim do to that.
This is like hitting the button that turns off your rear windshield wiper and getting furious that your forward wipers didn't turn off. Similar and related feature, but that button wasn't made to turn off your forward wipers. You gotta spin the knobby thing to turn those off. (Sorry, best car analogy I could come up with at 4am)
Although Microsoft has not formally recommended that users disable Autorun as an anti-Downadup measure, most security companies and researchers have in light of the autorun.inf infection vector.
The "recommendation" referred to is almost two years old and has nothing to do with the worm. Article is a troll pretty much. One support article is for disabling Autorun on CD-ROMs, while the other is for Autoplay. Neither was created specifically to support Downadup as far as I can tell.
So no, not really suspicious at all. Bad on the "researchers" who have pointed to those articles for protection.
The worm works in the background (obviously), and modifying anyone's system without their approval is against the law. For historical reference, see the Welchia worm.
Why are you running as a user with the privileges to run backorifice.exe? Why didn't your AV scanner detect backorifice.exe already? Why are you using an insecure browser / running infected warez / etc that installed backorifice.exe in the first place? If you're that concerned with security, why are you running Windows? If backorifice.exe is hitting port 80 from inside your network, you failed several steps before that. A good last defense for sure, but you still failed.
Besides, I was just correcting the parent that routers don't present their respective administrators with data logs, not submitting a SSP.
A movie costs from millions to hundreds of millions of dollars to produce, but I can buy a DVD for between five and twenty bucks.
Games at full price are the equivalent of the theatrical release of a movie. You get to enjoy it as soon as it's available to the public. If you want the DVD experience, feel free to wait 6 to 12 months for the game to get a "gold edition" or "greatest hits" release at $20-$30. Any of the good ones do.
A sixty dollar game that needs a $2000 PC To run? You guys are insane.
What are you blabbering about? My $600 "gaming" machine runs everything that's come out recently with all the goodies turned on. Besides, games like Crysis still ran fine on "current" systems when it was released. You just couldn't have all the eye candy turned on...and even then it still looked better than most other games.
You're missing the point. While this stuff might already be in the game, you have to work for it in some fashion.
Nope. To get the XP buff you just need to pay 12 months worth of subscription and you get it. Same with several other buffs, just longer subscription periods.
So I take it you agree with my assessment that it would be in the top ten list for the 'worst software released in the 20th century', and that it is ineligible for the 'biggest software disasters in the 21st century' top two list?
How about sometime you compare the number of times Bioshock has been downloaded, vs say Super Paintbrawl Extreme. I'm gonna guess the ratio is somewhere in the same neighborhood as number of sales for each title.
Slashdot Mirror
My 8 year old 5 button MS Explorer mouse works perfectly with Win7, dunno what you're talking about...
Also, didn't MS design that one thing, what was it called, the xbox (or something)? I heard it was just a repackaged computer.
Exactly what I don't get of this. When tracking the adobe exploits I saw several for Foxit pop up. The guy is basically advising security through obscurity. Foxit definitely released patches quicker than Adobe, but the vulnerabilities were still there...
This is pretty much true for everyone with a PDA phone. My HTC Hermes requires a nightly charge with the standard battery, though I use an extended battery to last two days. Everyone I know that owns an iPhone has to charge it every day. I know two people that have to carry around a special holster with a built in battery to charge their phone before they get home for the day.
Agreed. Streamed several shows last night on a PC without issue.
Just sprinkle a little Torgo's Executive Powder in Fox's water supply.
I'd probably disagree with the quality of the movies, but I haven't really watched them more than once. Futurama was a great 22 minute dose of comedy that I could flip on while I'm eating a big bowl of Golden Grahams. The movies are much harder to just strap in for a while...although the broken out comedy central versions made it a little better.
I'm really hoping they return to the show format...I think they still have it, they just had to do too much for the movie format.
Not how it works.
Really, I didn't know Windows 7 was fully documented. You'll have to send me all the info you've got on Windows Resource Protection, because it kinda sounds like they made some changes to it. Or maybe they didn't and they did get paid off by Adobe. Or maybe it's just beta software and something got all messed up. Or maybe the crack doesn't work with Win7.
Who's to say that Microsoft is just protecting installed DLL files, not necessarily per any vendor's request? Locking down the OS to make it more secure and all that stuff people rag on them for. Just sayin.
I'm fully aware both links when to the same page. However, these days Autoplay != Autorun. Autorun is the setting that parses the autorun.inf file when media is inserted and runs whatever it's told to. Autoplay searches inserted media for audio/video/picture files and ask if you want to launch them in their respective player/viewer. Both bring up the same prompt (depending on your settings), but both perform different functions.
Yeah, the US-CERT bulletin linked in the summary does actually disable processing the autorun.inf file. DISA put forward the recommendation last month to change that setting. I've tested it in the lab at work and it seems to do the trick.
I think everyone is taking this thing way over the top, the registry key setting has been known for a while now, as evidenced by this 2007 article. Users, the industry, etc just love to hate Microsoft and create panic to generate web hits. Granted MS could have came forward right away and said "in addition to the patch, make this regedit to really make sure you're safe", but it is what it is.
Holy smokes, I even bolded it for you! Let's try this again, with even more formating!!
One article is for disabling Autorun on CD-ROMs specifically. One article is for disabling Autoplay. Neither article describes how to stop the autorun.inf file from being processed on all removable media, nor does either article claim do to that.
This is like hitting the button that turns off your rear windshield wiper and getting furious that your forward wipers didn't turn off. Similar and related feature, but that button wasn't made to turn off your forward wipers. You gotta spin the knobby thing to turn those off. (Sorry, best car analogy I could come up with at 4am)
Although Microsoft has not formally recommended that users disable Autorun as an anti-Downadup measure, most security companies and researchers have in light of the autorun.inf infection vector.
The "recommendation" referred to is almost two years old and has nothing to do with the worm. Article is a troll pretty much. One support article is for disabling Autorun on CD-ROMs, while the other is for Autoplay. Neither was created specifically to support Downadup as far as I can tell.
So no, not really suspicious at all. Bad on the "researchers" who have pointed to those articles for protection.
The worm works in the background (obviously), and modifying anyone's system without their approval is against the law. For historical reference, see the Welchia worm.
Why am I running as a user with privileges to install applications?
Fixed that for ya.
Why don't I rely on anti-virus software to know what's safe and what isn't?
Any AV software should be set up to scan exes when they're launched. Any AV software should have no trouble detecting backorifice.exe.
If I'm concerned with security why am I using a computer?
Have you ever tried to encrypt your file cabinet using AES? I tried once but gave up just trying to create the S-box.
Why are you running as a user with the privileges to run backorifice.exe? Why didn't your AV scanner detect backorifice.exe already? Why are you using an insecure browser / running infected warez / etc that installed backorifice.exe in the first place? If you're that concerned with security, why are you running Windows? If backorifice.exe is hitting port 80 from inside your network, you failed several steps before that. A good last defense for sure, but you still failed.
Besides, I was just correcting the parent that routers don't present their respective administrators with data logs, not submitting a SSP.
A router won't alert you when a program or service tries to access your connection, but a software firewall will.
Turn on logging and your router can notify your PC, your email, your blackberry, etc etc.
How is he screwed if he invested in stocks? He'd still have all his shares; he would have lost nothing.
A movie costs from millions to hundreds of millions of dollars to produce, but I can buy a DVD for between five and twenty bucks.
Games at full price are the equivalent of the theatrical release of a movie. You get to enjoy it as soon as it's available to the public. If you want the DVD experience, feel free to wait 6 to 12 months for the game to get a "gold edition" or "greatest hits" release at $20-$30. Any of the good ones do.
A sixty dollar game that needs a $2000 PC To run? You guys are insane.
What are you blabbering about? My $600 "gaming" machine runs everything that's come out recently with all the goodies turned on. Besides, games like Crysis still ran fine on "current" systems when it was released. You just couldn't have all the eye candy turned on...and even then it still looked better than most other games.
Don't forget the follow up question "can't I just knock that guy into the wall?"
You're missing the point. While this stuff might already be in the game, you have to work for it in some fashion.
Nope. To get the XP buff you just need to pay 12 months worth of subscription and you get it. Same with several other buffs, just longer subscription periods.
So I take it you agree with my assessment that it would be in the top ten list for the 'worst software released in the 20th century', and that it is ineligible for the 'biggest software disasters in the 21st century' top two list?
Windows ME was released in the 20th century. It still has to be in the top 10 of that century though.
And I suppose you're going to use that banana to make the bread for a pastrami and cottage cheese sandwich?
I was going to use the oil analogy. It's going to run out eventually, so why not switch to something better now before we run out?
How about sometime you compare the number of times Bioshock has been downloaded, vs say Super Paintbrawl Extreme. I'm gonna guess the ratio is somewhere in the same neighborhood as number of sales for each title.
Your double standard is nice, too. Good work.