Archive for January, 2006

Windows Wireless vulnerability

Saturday, January 14th, 2006

Brian Krebs has a post today on a Windows wireless networking “feature” which can be somewhat of a security risk. You see, it seems that With wireless networking enabled, Windows remembers the last wireless SSID that you connected to, so let’s say you were at a public Wireless access point called “Bob’s hotel” and you […]

MS responds to “intentional backdoor”, WMF claim

Friday, January 13th, 2006

Microsoft is disputing claims by Steve Gibson, that the WMF vulnerability was an intentionally placed backdoor. There is a response to the claims in the Microsoft Security Incident Response blog. Apparently since the SetAbortProc procedure relates to printing, previous versions of Windows ignored the call unless printing was involved. (Why did windows start paying attention […]

Mozilla Firefox 1.5 for Mandriva 2006

Friday, January 13th, 2006

Mandriva 2006 released without Mozilla Firefox 1.5, it came with 1.0.6 (which included security fixes and other patches from 1.0.7)…. anyway, source rpm’s for Firefox 1.5 became available in cooker, so I’ve built rpm’s for Mandriva 2006 for easy management on my systems. I’ll post links here as they may be of use to others […]

WMF vulnerability not an accident? Was it an intentional backdoor?

Friday, January 13th, 2006

I’m not quite sure if I’m willing to attribute to design, what I could attribute to a mistake… but, slashdot has pointed out that Steve Gibson in his latest Security Now! podcast (link is to transcript), is suggesting that it appears as though the WMF vulnerability of recent weeks appears (to him) to have been […]

Mondorescue manually restoring from an afio.bz2 file

Friday, January 13th, 2006

For several years now, I’ve used Mondorescue as a backup solution for those customers with a Linux server. It makes for a nice, easily scriptable backup that can go ahead and burn to disc, *(or tape or another pc….) My preferred way of doing this has been a full mondorescue backup to dvd (usually one […]

Clamav 0.88 for Mandrake 10.0

Friday, January 13th, 2006

I’ve got a couple of older Mandrake 10.0 servers that I’m still maintaining. They’re systems that it hasn’t been practical (yet) to do an upgrade to a more recent release of the base operating system. Two of those are currenlty using Clamantivirus for their mailscanning. So, with the recent security vulnerability an update was needed. […]

Microsoft Support extensions for XP

Thursday, January 12th, 2006

Good news for Windows XP users (especially XP Home). Microsoft has extended the support period for XP Home and Pro. Originally, security patch related support was expected to end December 31st of this year. According to the article for XP Home… So for the consumer versions of Windows XP, mainstream support was going to end […]

Apple Quicktime security vulnerabilites and update

Thursday, January 12th, 2006

There are a number of vulnerabilites reported with Apple Quicktime player related to the way it handles various file formats. Quicktime Player 7.0.4 is the current released GOOD version, everything from 7.0.3 and prior are vulnerable. The Security Fix has some details. There were a total of about 8 vulnerabilities fixed in 7.0.4 and they […]

Microsoft’s speed to get security patches out

Wednesday, January 11th, 2006

Brian Krebs at the Security Fix has done an interesting study related to how long it takes Microsoft to release a security fix for a problem, starting from the time they are notified of the security vulnerability. For the most part, 134.5 days has been the window between notification and vulnerability patching for the last […]

Atlantis resort in the Bahamas loses customer information…

Tuesday, January 10th, 2006

The identities of 50,000 customers of the Atlantis resort in the Bahamas has been lost. The information was copied from the hotel’s customer database and can include credit card information as well as social security numbers as well.    Send article as PDF   

Google
 
Web www.averyjparker.com