Archive for the 'Windows Software' Category


IE7 coming within the month, Firefox 2 RC2 out as well

Monday, October 9th, 2006

It’s kind of interesting to get to do a “browser wars” kind of post where I mention a new release of two browsers coming out about the same time…. The release of IE7 is coming within weeks we are reminded by zdnet. It’s noted that it will be rolled out through automatic updates not long […]

October Microsoft update advance notice….

Thursday, October 5th, 2006

11 patches will be released by Microsoft on the 10th of October. Bulletin is here, 6 for windows, 4 for Office (at least one in each of those two batches is critical) and 1 .NET (moderate) – yes the Windows updates will likely require a restart. Betanews has a bit more coverage hoping the WebViewFolderIcon […]

More rogue security software

Tuesday, October 3rd, 2006

Wolves in sheeps clothing…. from Sunbelt blog…. Watch out for pestcapture and “friends” (using dlls from spysheriff). Thanks to sunbelt for keeping their eyes open on the threat of wolves in sheepdogs clothing…. It’s so frustrating having to explain to someone that the software they downloaded to solve their problems has become part of the […]

Some days you really want to slap someone at Microsoft….

Sunday, October 1st, 2006

So, I was formatting a drive the other day. It’s an external hard drive that will need to be readable AND writable by both Mac and Windows XP machines. So, the only choice (without paying for MacDrive to read/write to HFS+) is really FAT32. The drive is in the 250GB-300GB ballpark. So, I reference the […]

Microsoft Internet Explorer patches for unsupported OS versions (Windows 98 and ME)

Sunday, October 1st, 2006

For starters, if you’re using Windows 98 or ME still in a production system, you REALLY need to be looking at migration options and you should realize that the architecture of those systems is NOT conducive to a good secure platform. No XP isn’t perfect, but it is an improvement in many areas. That much […]

Firefox zero-day vulnerability (or is it?)

Sunday, October 1st, 2006

I saw a comment somewhere else that zero-day was overused and in essense ANY previously unknown vulnerability in open source software is technically zero day… the intent here though is to use the word in this context…. “vulnerability has been released without giving the vendor an opportunity to patch…” Yes, the fun vulnerability weekend seems […]

Oh and ANOTHER Powerpoint vulnerability too….

Saturday, September 30th, 2006

Sometimes you feel like the little Dutch boy of myth/legend with his finger trying to plug the hole in a dam…. Incidents bring us this as well…. another powerpoint vulnerability seems to have been disclosed. MS has an advisory. All currently supported Office versions are vulnerable (even on Mac?) Workarounds include not opening powerpoint files… […]

Microsoft vulnerability whack-a-mole continues…..

Thursday, September 28th, 2006

Translation – Microsoft patched one vulnerability another surfaces…. Incidents.org brings us the frustrating news…. If you remember the month of browser bugs series of exploits back in July, there was a denial of service there that appears to have code execution after all. Coincidence or not, it got publicly released after the out of cycle […]

Microsoft releases official VML patch!!

Tuesday, September 26th, 2006

The big news this afternoon is that Microsoft HAS gone out of the routine patch cycle to release a security fix for the VML vulnerability that’s been actively exploited in recent days for everything from sneak keylogger installs to massive spyware installs. Sans has a few links, if you de-registered the affected DLL you should […]

Update on the Internet Explorer VML vulnerability

Friday, September 22nd, 2006

Just catching up on the days VML vulnerability news from today…. It looks as though… the exploit is now MUCH more widespread this blog has some video of an infection, what’s notable is that the first take was VERY UNEVENTFUL, it was used to stealthily install a keylogger. (So that they can harvest paypal/bank/etc. passwords…) […]

Google
 
Web www.averyjparker.com