EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS


Windows Users Left Vulnerable Over Christmas, as Usual

Posted in Security, Servers, Windows at 5:06 am by Dr. Roy Schestowitz

Boycott Novell on hand

Summary: Users of IIS on Windows Server are served another blow while they are on vacation; other minor news from the past week

JUST ABOUT every year — including the previous one — Microsoft clients are left to be worried about their computers. Statistics suggest that roughly one in two Windows PCs is a zombie PC.

This Christmas is no exception, but the main victim appears to be users of Windows Server with IIS. Microsoft already neglects Windows Server when it comes to security [1, 2, 3] and now comes this (reported on Christmas Day):

“Microsoft IIS vuln leaves users open to remote attack

A researcher has identified a vulnerability in the most recent version of Microsoft’s Internet Information Services that allows attackers to execute malicious code on machines running the popular webserver.

The bug stems from the way IIS parses file names with colons or semicolons in them, according to researcher Soroush Dalili. Many web applications are configured to reject uploads that contain executable files, such as active server pages, which often carry the extension “.asp.” By appending “;.jpg” or other benign file extensions to a malicious file, attackers can bypass such filters and potentially trick a server into running the malware.

How predictable. This begs for an explanation: why did the US government choose a Microsoft veteran to head security for example?

Howard Schmidt is still being analysed and Bruce Schneier writes:

I head this rumor two days ago, and The New York Times is reporting today.

Reporters are calling me for reactions and opinions, but I just don’t know. Schmidt is good, but I don’t know if anyone can do well in a job with lots of responsibility but no actual authority. But maybe Obama will imbue the position with authority — I don’t know.

Speaking of this additional Microsoft influence in the United States, Amico has just hired a Microsoft veteran.

Amico Engages Former Intel and Microsoft Software Developer for North American Expansion


Mr. Glass has over 20 years of experience in software development and has previously provided services for top companies such as British Telecom, Intel, Cisco Systems, Barclays and Microsoft.

Microsoft employees write buggy code. To give an example from several days ago, watch what Xbox is up to:

Microsoft Accidentally Charges $800 for Arcade Game


In all seriousness, this is certainly just an error on Microsoft’s part – someone meant to type in “800 MS Points” (or $10) and ended up pricing the game at 80 times that.

It could be a human error at the input level, but still…

Looking at something a little different now, Motley Fool, a Microsoft fan site for the most part, is worried about the continued decline of Internet Explorer, which represented a form of Microsoft grip on the Web.

StatCounter, an analytics firm, says that Firefox’s share of the browser market now stands at 32.06%, up almost seven percentage points from last November. Internet Explorer’s share fell more than 12 percentage points over the same period.


Microsoft investors have reason to worry. This is a war, and it’s being fought in the browser. The most functional environment for cloud computing will win this conflict. Going by the trend in the numbers, users increasingly believe that’s Firefox.

More information in:

According to some of the latest figures, Microsoft loses share in both Web browsers and Web servers. Security problems are among the catalysts spurring this trend.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New

  1. The EPO's Balkan Express Keeps Chugging Along Despite Predictions of Derailment

    The latest part in the series regarding the reappointment of the two Vice-Presidents, Casado and Topić

  2. Advice to Journalists: Stop Repeating Propaganda of the EPO, a Serial Liar With a Track Record

    The EPO is weaponising its propaganda and pushing hard for media across Europe to repeat this propaganda while severely punishing anyone who 'dares' contradict it

  3. Leaked: Ljiljana Kuterovac Covering Željko Topić's (EPO) Back

    Leaked E-mail from June 2012 regarding Željko Topić, an EPO Vice-President who reportedly faces many criminal charges in Croatia

  4. Leaked: Budget and Finance Committee Outcomes That Jeopardise What's Left of the EPO's Future

    A look at the latest reckless step from the Budget and Finance Committee of the Administrative Council (chaired by Battistelli's pet chinchilla), which marginalises yet more oversight or a branch which facilitates patent quality control (thereby concealing the effect of Battistelli's ruinous sausage factory mentality)

  5. Links 27/10/2016: Major Changes in Unity 8, Nextcloud Targets Phones

    Links for the day

  6. 'Balkan Express' Teaser: EPO's Željko Topić, Kuterovac, Campinos, Gurry, Battistelli and the DKPTO (Kongstad)

    Various photos of Topić and Kuterovac. Some more photos with other IP "luminaries" such as Campinos of the EUIPO and Gurry of the WIPO.

  7. The United States Pressures India to Broaden Patent Scope and Other Monopolies

    The envoy of the US is trying to tell India how to run the country (stricter laws regarding copyrights, trademarks, and patents), as a condition for foreign investment by multinational corporations

  8. Budget and Finance Committee of the Administrative Council (EPO) Confirms Exile of the Boards of Appeal

    Crushing of highly-skilled staff, propaganda in the form of new press releases, and recruitment attempts that won't succeed because the world now knows what goes on inside the European Patent Office

  9. Links 26/10/2016: “softWaves” in Debian 9, Rust in GNOME

    Links for the day

  10. Leaked: EPO's Vice-President Willie Minnoye Saying the Unsayable, Then Threatening Anyone Who Keeps Record (Evidence) of It

    E-mail that would leave Vice-President Willie Minnoye bashful, as it helps show not only bad policy but also attempts at suppression of discussion about it

  11. Puff Pieces of the EPO-IPO (EPO+EUIPO) Have Begun to Appear Amid New Evidence of Brain Drain, Lowered Standards

    The grim vision of the EPO which is losing all its talent (over time), becomes more like a production line (quality does not matter), and produces propaganda for "media positioning" (or "placements") -- all under the guise of 'studies'

  12. Leaked: Minutes From the Administrative Council of the EPO Regarding the 'Reform' (Exile) of the Boards of Appeal

    Details of the relatively secret proceedings back in June (belatedly released only a short while ago), carefully abbreviated to demonstrate which delegations helped Battistelli crush the Boards of Appeal and which ones insisted on maintaining the status quo, as per the EPC

  13. No Promising Future For the EPO Under Battistelli (If Any Future At All)

    Pessimism becomes realism at the European Patent Office as units are being torn apart, patent quality discarded, "unified" patent courts dreamed of (more patent lawsuits, higher damages), and EUIPO (EU-associated, unlike Eponia) gets closer to the EPO

  14. Leaked Minutes From the EPO Reveal That Battistelli is Detached From Reality and Blames Everything on “Union Officials”

    Minutes of the Administrative Council's meeting reveal some truly bizarre rants from Battistelli, who simply refuses to accept that the European Patent Office is burning (without a future direction, only burnout and brain drain) under his poor and abusive leadership

  15. Tata/TCS is Still Pushing for Software Patents in India

    The obnoxious company that is promoting Microsoft and software patents in a country that needs neither makes the headlines again (Financial Express)

  16. Links 25/10/2016: Rackspace's Praise of FOSS, Chain Chooses the GPL(v3)

    Links for the day

  17. Links 24/10/2016: Linux 4.9 RC2

    Links for the day

  18. Battistelli Plans to Expand the Social [sic] 'Study' (Then 'Conference') Propaganda Until Next Month, Under the 'Workshop' Umbrella

    Milking his shameless propaganda (paid-for 'studies'), Battistelli wants to rewrite the record by all means possible, then pretend that EPO staff participates in it

  19. EPO and EUIPO Join Hands to Release Propaganda (for European Media to Parrot) Some Time Tomorrow

    EPO and EUIPO in collaboration for the promotion of the notion that they are both necessary (and reinforced speculations about growing overlap between them)

  20. UPC Preparatory Committee Puts the Brakes on UPC Amid Brexit and Growing Uncertainty

    The Unified Patent Court (UPC) preparatory committee recognises that the UPC isn't going anywhere (any time soon) and false job advertisements -- or advertisements for jobs that will never exist -- are withdrawn

  21. Updates Regarding EPO and BoAC: Unrest and Injustice Carry on

    Some of the latest information which is publicly and privately available to us, in particular regarding the case of a suspended judge which represents unprecedented erosion of the appeal boards' independence (and hence lack of justice in the Organisation)

  22. EPO and the “Iberian Connection”: Patricia García-Escudero Márquez - Battistelli's Pet Chinchilla on the Boards of Appeal Committee?

    Why the Boards of Appeal Committee has begun showing prominent signs that it is anything but independent and capable of standing up to Battistelli (or his circle at the Office, which includes the “Iberian Connection")

  23. Links 23/10/2016: Alcatel's New Android Smartphones, Another Honorary Doctorate for Stallman

    Links for the day

  24. Open Letter Exposing the Farce Which Was Battistelli's 'Social Conference' Coinciding With Further (New) Attacks on EPO Staff Representatives

    A detailed letter reveals legitimate concerns expressed by staff representatives at the EPO ahead of the so-called Social Conference, in which we have highlighted severe factual flaws

  25. Translation of Latest Rant From French MP Philip Cordery About Benoît Battistelli's Abuses at the EPO

    Philip Cordery crosses horns with Benoît Battistelli, who has become a source of embarrassment for France with his autocratic tendencies and misguided policies that rapidly ruin the European Patent Office (EPO)

  26. Battistelli-Commissioned PwC ‘Study’: Leaked Document Shows PwC's Dishonesty and Misrepresentation of EPO Staff

    An in-depth analysis (but not comprehensive, just preliminary) of the so-called 'study' from PwC, which basically did what it was paid for (pay to say)

  27. Links 22/10/2016: Deus Ex for GNU/Linux, Global DDoS (DNS)

    Links for the day

  28. Battistelli-Commissioned PwC ‘Study’: Survey Comparison Shows Serious Deterioration and Efforts by PwC to Disguise the Truth

    The latest output from PwC turns out to be even worse than initially thought, indicating that not only did it find a degradation in the EPO but also attempted to hide/obscure it

  29. EPO Teaser - The "Iberian Connection" - Some Photos of García-Escudero and His Royal/Government Connections

    A look at the undeniably close connections between Mr. García-Escudero and the most powerful people in Spain

  30. Disruption to Site's Service

    A technical note about why Techrights has not been publishing many articles recently


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time


Recent Posts