The Microsoft Update mechanism has been used to spread malware
1–10 of 64 posts
Re: The Microsoft Update mechanism has been used to spread malware
#2So it's working as designed.
Re: The Microsoft Update mechanism has been used to spread malware
#3It really was an unbelievable oversight to use the same certs in the Terminal Services activation system.
Quite a demonstration that even if you go to great pains to secure the code if you aren't careful with your credentials then it's for nothing.
Re: The Microsoft Update mechanism has been used to spread malware
#4This is like finding out the zombies have made it into the compound.
I wonder how big this hole is to fix. I also wonder, as many have, if this was written by an Intelligence agency and, if so, if they had access to Windows' source code.
Re: The Microsoft Update mechanism has been used to spread malware
#5Here we have an example of complexity arising from copy protection/licensing. It so happens that this complexity caused a security vulnerability which, when exploited on any one computer, affects close to a billion computers.
Is anyone else infuriated that a vulnerability like this exists in what is analogous to copy protection code?
In other words, if Microsoft had been spending more of their resources on making software work, instead of making software work only when you've proven you've paid for it, this particular issue would not exist.
Re: The Microsoft Update mechanism has been used to spread malware
#6Here we have an example of complexity arising from copy protection/licensing. It so happens that this complexity caused a security vulnerability which, when exploited on any one computer, affects close to a billion computers. Is anyone else infuriated that a vulnerability like this exists in what is analogous to copy protection code? In other words, if Microsoft had been spending more of their resources on making sof…
The same would happen on ubuntu if someone steals the repository keys. This has nothing to do with copy protection.
Re: The Microsoft Update mechanism has been used to spread malware
#7Oh look, another scaremongering and purposely misleading article from F-Secure. This is starting to become a regular thing isn't it; I guess the recession must have hit them particularly hard.
Re: The Microsoft Update mechanism has been used to spread malware
#8Oh look, another scaremongering and purposely misleading article from F-Secure. This is starting to become a regular thing isn't it; I guess the recession must have hit them particularly hard.
I'm curious, could you please quote some of the points you thought were purposefully misleading in the article?
Re: The Microsoft Update mechanism has been used to spread malware
#9Here we have an example of complexity arising from copy protection/licensing. It so happens that this complexity caused a security vulnerability which, when exploited on any one computer, affects close to a billion computers. Is anyone else infuriated that a vulnerability like this exists in what is analogous to copy protection code? In other words, if Microsoft had been spending more of their resources on making sof…
The same would happen on ubuntu if someone steals the repository keys. This has nothing to do with copy protection.
Well... No, it'd be like if ubuntu required you to sign up to corporate licensing in order to use Ubuntu. Then handing out misconfigured keys to corporate customers which could also be used to sign repos as an unfortunate side effect.
Re: The Microsoft Update mechanism has been used to spread malware
#10Oh look, another scaremongering and purposely misleading article from F-Secure. This is starting to become a regular thing isn't it; I guess the recession must have hit them particularly hard.
[deleted]