| SillyDog701 Forums |
| Author |
Message |
Mandrake


Joined: 13 Sep 2002 Posts: 3920
|
|
| Back to top |
|
 |
DJGM


Joined: 19 Jun 2002 Posts: 4387 Location: Manchester, England, UK
|
01 Jul, 2004 10:47 am |
[sdp=37024] |
|
Q: What has IE got in common with a Teflon based frying pan?
A: They're both non-stick!
Honestly though, using IE is akin to hiding from an axe wielding psycho, under a patchwork quilt!
UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040618
SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks! |
|
| Back to top |
|
 |
DJGM


Joined: 19 Jun 2002 Posts: 4387 Location: Manchester, England, UK
|
02 Jul, 2004 5:17 pm |
[sdp=37181] |
|
Microsoft have issued a "config change" to deal with the "Download.Ject" exploit.
More information available on Microsoft's website here . . .
Basically, MS recommend that all Windows 2000/XP/2003 users apply
this patch a.s.a.p. The update can be obtained from Windows Update.
UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040618
SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks! |
|
| Back to top |
|
 |
Antony


Joined: 18 Jun 2002 Posts: 12845 Location: Sydney, Australia
|
04 Jul, 2004 6:52 pm |
[sdp=37347] |
|
Basically, Microsoft has decided to plug the hole by turning off the ability for the ActiveX component to write to the operating system. (C|net News.com )
UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8
|
|
| Back to top |
|
 |
Don_HH2K


Joined: 09 May 2004 Posts: 4792
|
04 Jul, 2004 6:59 pm |
[sdp=37349] |
|
If it makes Windows more secure, then go ahead. It's not a big loss to non-IE users.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax) |
|
| Back to top |
|
 |
Wellander


Joined: 21 Oct 2002 Posts: 2576
|
04 Jul, 2004 7:11 pm |
[sdp=37350] |
|
| Antony wrote: | Basically, Microsoft has decided to plug the hole by turning off the ability for the ActiveX component to write to the operating system. (C|net News.com ) |
Hi,
That sais good by to WIndows update.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a1) Gecko/20040520 |
|
| Back to top |
|
 |
Don_HH2K


Joined: 09 May 2004 Posts: 4792
|
04 Jul, 2004 7:27 pm |
[sdp=37353] |
|
Unless Microsoft develops some secret new technology that can only be accessed via command line for updates.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax) |
|
| Back to top |
|
 |
Mandrake


Joined: 13 Sep 2002 Posts: 3920
|
04 Jul, 2004 8:33 pm |
[sdp=37357] |
|
Specifically Microsoft's configuration change blocks the ability of the ADODB.screen ActiveX component to write to the PC's hard drive. It does not disable ActiveX entirely, and WindowsUpdate still works fine.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040616
Core i7 920 | ASUS P6T Deluxe v2 | 3TB+ HDD | 12GB Corsair DDR3 | Radeon 4890 Xfire | X-Fi Titanium Fatal1ty | Logitech Z-5500 Speakers | Dell 3008WFP | Seven RC1 |
|
| Back to top |
|
 |
Antony


Joined: 18 Jun 2002 Posts: 12845 Location: Sydney, Australia
|
05 Jul, 2004 7:51 am |
[sdp=37386] |
|
According to SecurityFocus , this vulnerability has been known for more than 9 months, it affects IE 5.5 and later on Windows 95 and later.
however, the fix is only available for Windows 2000 and above
too late, too little
Reference: Microsoft Internet Explorer ADODB.Stream Object File Installation Weakness (SecurityFocus)
SillyDog701 recommends Mac to any user who is thinking about getting a new computer.
UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8
|
|
| Back to top |
|
 |
DJGM


Joined: 19 Jun 2002 Posts: 4387 Location: Manchester, England, UK
|
11 Jul, 2004 2:08 am DJGM speaks his mind . . . |
[sdp=38002] |
|
IMHO, for an organisation as big as Microsoft, to waste so much precious time,
pondering whether or not to issue a patch for a very serious security problem,
while a large number of computer users had their systems exploited via this
dangerous bug, is just disgraceful, and totally unacceptable.
Especially, when a comparatively tiny, independent non-profit software vendor
such as Mozilla, with far less revenue and far fewer resources at it's disposal
than Microsoft, gets their security bug fixed in less than a day and a half!
The Microsoft staffers involved with IE, should hang their heads in shame.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040616
SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks! |
|
| Back to top |
|
 |
|