-- Leo's gemini proxy
-- Connecting to gemini.techrights.org:1965...
-- Connected
-- Sending request
-- Meta line: 20 text/gemini;lang=en-GB
Posted in Law, Microsoft, Security, Vista 7, Windows at 1:19 pm by Dr. Roy Schestowitz
“Our products just aren’t engineered for security.”
–Brian Valentine, Microsoft executive
Summary: Microsoft’s inability (or unwillingness) to protect customers from severe flaws raises important questions regarding negligence
AS WE stressed last year, Microsoft publicly addresses flaws it is aware of only/usually when attacks begin. Otherwise, Microsoft lies about security. It tells what shareholders want to hear. So although the test of liability may not pass legal muster, negligence does. Should Microsoft be sued as some journalists have already suggested?
The latest serious exploit that affects Vista 7 (there are more examples appended at the bottom of this post) is so valuable for showing how Microsoft ignores security problems and improperly handles them until it’s too late. SJVN argues:
> I do wonder sometimes about Microsoft’s quality assurance. No, I tell a lie. I always wonder about Microsoft’s quality assurance. As in, “How can they keep making mistakes like this?” In the latest, a new SMB vulnerability has been found and exploited that can lock-up any Windows 7 or Server 2008 R2 system.As reported in ComputerWorld, Laurent Gaffie posted details of the vulnerabilities, along with proof-of-concept exploit code, to the Full Disclosure security mailing list today, as well as to his personal blog. Gaffie claimed that his exploit crashes the kernel in Windows 7 and its server sibling, Windows Server 2008 R2, triggering an infinite loop. Or, as he puts in so well in the exploit’s code: “‘Most Secure Os Ever’ –> Remote Kernel in 2 mn. #FAIL,#FAIL,#FAIL”[...]Oh, and Microsoft, hurry up and fix this. OK? This is embarrassingly bad.
This is not just “embarrassingly bad”, it is practically very bad because exploit code is already out there while Microsoft is still “investigating”.
> Microsoft has reportedly begun investigating a potentially nasty denial of service vulnerability affecting Windows 7.
Microsoft has been caught hiding vulnerabilities and their fixes (secret fixes which invisibility of proprietary software enables), probably for raves about numbers, i.e. illusion of safety. How long has Microsoft known about this for and why is there no patch yet? █
On Vista 7 insecurity:
Cybercrime Rises and Vista 7 is Already Open to HijackersVista 7: Broken Apart Before ArrivalDepartment of Homeland Security ‘Poisoned’ by Microsoft; Vista 7 is Open to Hijackers AgainVista 7 Security “Cannot be Fixed. It’s a Design Problem.”Why Vista 7 Could be the Least Secure Operating System EverVista 7 Vulnerable to Latest “Critical” FlawsVista 7 Seemingly Affected by Several More “Critical” Flaws This MonthReason #1 to Avoid Vista 7: InsecurityVista 7 Left Hijackable Again (Almost a Monthly Recurrence)Vista 7 as Insecure as Predecessors, Shows SophosMicrosoft, Novell, SCO, and NASDAQ Delistings
Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
Permalink Send this to a friend
----------
➮ Sharing is caring. Content is available under CC-BY-SA.
-- Response ended
-- Page fetched on Sat May 18 12:15:24 2024