Microsoft Warns Consumers About Major Windows Security Flaws

[rodbarnett]

WASHINGTON (AP) - Microsoft Corp. warned customers Tuesday about unusually serious security problems with its Windows software that could let hackers quietly break into their computers to steal files, delete data or eavesdrop on sensitive information.

Microsoft, which learned about the flaws more than six months ago from researchers, said the only protective solution was to apply a repairing patch it offered on its Web site. It assessed the threat to computer users as "critical," its highest rating.

A Microsoft security executive, Stephen Toulouse, said the flawed software was "an extremely deep and pervasive technology in Windows," and urged customers to apply the patch immediately

<snip>

"This is one of the most serious Microsoft vulnerabilities ever released," said Marc Maiffret of eEye Digital Security Inc. of Aliso Viejo, Calif., which discovered the new Windows flaws. "The breadth of systems affected is probably the largest ever. This is something that will let you get into Internet servers, internal networks, pretty much any system."

http://ap.tbo.com/ap/breaking/MGAH5J9DIQD.html

[Mairead]

1. "extremely pervasive"

Sounds like they found another bug in their @#$%! browser code. Pillocks.

[Shadder]

2. What?

No Microsoft bashers yet to tell us how great Linux is and how something like this would never happen with their os?

[htuttle]

4. Just don't have the heart to anymore...

Bashing M$ security is starting to feel like picking on one of the kids who took the 'short bus' to school.

[ret5hd]

11. ok, i'll pick up the ball for you this time...

Linux is great and something like this would never happen with it.

Next time it's somebody elses turn.

on edit: typo

[burrowowl]

13. Just too tired of M$ goof-ups

to post another bash.
However, while we are at it. It took them how many months to fix it?
The code must be a pile of c**p.

[JailForBush]

3. Oh, the Irony!

The irony is that many people think security flaws are Microsoft's ONLY problem. They think Bill Gates is a tender-hearted philanthropist who just makes flawed software.

Nevermind the fact that he's a convicted monopolist who poses a national security threat. Microsoft's attacks on public education are so ferocious you'd think the public would openly revolt - until you remember that liberals really don't give a damn about education and Republicans are too obsessed with corporations and creationism.

Few people have the time or money to instantly leap from Microshaft to Linux or Apple. But there are many ways you can begin to migrate, even saving money in the process. Check out OpenOffice.org. Then check out Linux and Apple - anything but Microshaft!

[Fla_Dem]

5. Windows has more holes in it

than repukes have excuses.

[JailForBush]

6. Ha! Gates ought to change the name from Windows to

Republicans!

[AlabamaYankee]

19. Isn't it called "Windows"

because it's so easy to open and get through?

[mac56]

20. It's called "Windows"

because that's what you want to throw it out of.

[Mithras61]

7. Link to security bulleting on MS' site

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS04-007.asp

so you can install the patch...

The bulletin is MS04-007.

[KoKo]

8. But haven't some folks here said that those patches have crashed their

systems? I've never put a patch from MS on my computer because I've heard so many bad stories about them. Why Now, anyway? Are they doing this just because of the Senate Investigation into the "Computergate" story? It seems odd that they are saying this is such a high priority
right now. It would make a good cover for the Repugs. OOPS Microsoft did it, not us. And, Microsoft could just say they only recently discovered it, but it would have innocently allowed Repugs to view documents. :tinfoilhat: Even MS couldnt stoop that low.....but I think I'm going to pass on that patch.

[KoKo]

9. Sounds like it's mostly for Servers. I use WinME, so looks like only

users of XP and Win2000 might have problems. I got nervous enough to go check it out.

[Mithras61]

12. You are correct that it doesn't affect WinME users...

This patch is for WinNT 4.0, Win2000 & WinXP. It appears that ME is not affected by the ASN issue. Aside from that, the discovery was actually 6 months ago by E-eye Security, but Microsoft (in typical MS fashion) took 6 months to produce and release the patch. I don't think this is a political ploy, though, because the memo theft thing was a mis-configured security setting & some hacking.

[FlaGranny]

10. I have every patch that MS ever put out

and for the last year I've had my computer set to download and install them automatically. I have never had a problem with any of them so far. I have a firewall and I have automatically updated virus protection. In addition, my ISP has absolutely superb virus and spam filtering (i.e., none get through). I feel pretty safe.

[Old and In the Way]

15. Ooops, not politically correct FlaGranny!

But, me too, and I'm quite happy with XP Pro. I've got 180,000 files on my system (counting discrete back-up)and I count on my computer for my work. Never have had a problems/crashes, viruses, etc.

[Bandit]

16. That is exactly what happened to me

I up loaded a microsoft windows patch and it crashed my computer to the point that the only way to restore it was to lose all the data except for a very few items. I wouldn't recommend doing it but then again what else can one do except maybe buy a mac and that will eliminate all of those problems. Now I am afraid to download anything from microsoft. I feel violated and vulnerable. I hate computers but couldn't live without them. Love/Hate ~ Hate/Love Damn things anyway.

[WillyT]

14. Thanks For The Heads-Up !!!

:yourock:

[mac56]

17. The only Microsoft program that wouldn't suck -

would be if they made a vacuum cleaner.

[ConcernedCanuk]

18. I'm runnin' W98SE, got the "patches" earlier, but support is gone

.
.

unless you want to pay for it -

I think their new softwares only offer support for 5 years, not sure . .

But if I find it necessary to "upgrade"

I'll be checking out these other OS's like Linux and so on,

hmm,

maybe NOW is the time to start "educating" myself - -