EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

12.27.09

Windows Users Left Vulnerable Over Christmas, as Usual

Posted in Uncategorized at 5:06 am by Dr. Roy Schestowitz

Boycott Novell on hand

Summary: Users of IIS on Windows Server are served another blow while they are on vacation; other minor news from the past week

JUST ABOUT every year — including the previous one — Microsoft clients are left to be worried about their computers. Statistics suggest that roughly one in two Windows PCs is a zombie PC.

This Christmas is no exception, but the main victim appears to be users of Windows Server with IIS. Microsoft already neglects Windows Server when it comes to security [1, 2, 3] and now comes this (reported on Christmas Day):

“Microsoft IIS vuln leaves users open to remote attack

A researcher has identified a vulnerability in the most recent version of Microsoft’s Internet Information Services that allows attackers to execute malicious code on machines running the popular webserver.

The bug stems from the way IIS parses file names with colons or semicolons in them, according to researcher Soroush Dalili. Many web applications are configured to reject uploads that contain executable files, such as active server pages, which often carry the extension “.asp.” By appending “;.jpg” or other benign file extensions to a malicious file, attackers can bypass such filters and potentially trick a server into running the malware.

How predictable. This begs for an explanation: why did the US government choose a Microsoft veteran to head security for example?

Howard Schmidt is still being analysed and Bruce Schneier writes:

I head this rumor two days ago, and The New York Times is reporting today.

Reporters are calling me for reactions and opinions, but I just don’t know. Schmidt is good, but I don’t know if anyone can do well in a job with lots of responsibility but no actual authority. But maybe Obama will imbue the position with authority — I don’t know.

Speaking of this additional Microsoft influence in the United States, Amico has just hired a Microsoft veteran.

Amico Engages Former Intel and Microsoft Software Developer for North American Expansion

[...]

Mr. Glass has over 20 years of experience in software development and has previously provided services for top companies such as British Telecom, Intel, Cisco Systems, Barclays and Microsoft.

Microsoft employees write buggy code. To give an example from several days ago, watch what Xbox is up to:

Microsoft Accidentally Charges $800 for Arcade Game

[...]

In all seriousness, this is certainly just an error on Microsoft’s part – someone meant to type in “800 MS Points” (or $10) and ended up pricing the game at 80 times that.

It could be a human error at the input level, but still…

Looking at something a little different now, Motley Fool, a Microsoft fan site for the most part, is worried about the continued decline of Internet Explorer, which represented a form of Microsoft grip on the Web.

StatCounter, an analytics firm, says that Firefox’s share of the browser market now stands at 32.06%, up almost seven percentage points from last November. Internet Explorer’s share fell more than 12 percentage points over the same period.

[...]

Microsoft investors have reason to worry. This is a war, and it’s being fought in the browser. The most functional environment for cloud computing will win this conflict. Going by the trend in the numbers, users increasingly believe that’s Firefox.

More information in:

According to some of the latest figures, Microsoft loses share in both Web browsers and Web servers. Security problems are among the catalysts spurring this trend.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Leaked: Boards of Appeal Face 'Exile' or 'Extradition' in Haar After Standing up to Battistelli

    A look at some of the latest moves at the European Patent Office (EPO), following Battistelli's successful coup d’état which brought the EPO into a perpetual state of emergency that perpetuates Battistelli's totalitarian powers



  2. The US Government Accountability Office (GAO) Comes Across as Against Software Patents, Relates to the EPO as Well

    Some analysis of the input from the Government Accountability Office (GAO) with focus on the EPO and software patents



  3. In the US, Patent Trolls Engage in Patent Wars and Shakedowns, Whereas in China/Korea Large Android OEMs Sue One Another

    Highlighting some of the differences between the US patent system and other patent systems



  4. Links 24/7/2016: Elive 2.7.1 Beta, New Flatpaks and Snaps

    Links for the day



  5. Links 23/7/2016: Leo Laporte on GNU/Linux, Dolphin Emulator’s Vulkan Completion

    Links for the day



  6. Links 22/7/2016: Wine 1.9.15, KaOS 2016.07 ISO

    Links for the day



  7. Haar Mentioned as Likely Site of Appeal Boards as Their Eradication or Marginalisation Envisioned by UPC Proponent Benoît Battistelli

    Not only the Staff Union of the European Patent Office (SUEPO) is under severe attack and possibly in mortal danger; the increasingly understaffed Boards of Appeal too are coming under attack and may (according to rumours) be sent to Haar, a good distance away from Munich and the airport (half an hour drive), not to mention lack of facilities for visitors from overseas



  8. EPO Attaché Albert Keyack Viewed as Somewhat of a Mole, Reporting From the US Embassy in Brazil Until Shortly Before the Temer Coup

    Public responses to the role played by Albert Keyack on behalf of the United States inside the European [sic] Patent Office



  9. EPO Insiders Explain Why the EPO's Examination Quality Rapidly Declines and Will Get Even Worse Because of Willy Minnoye

    Public comments from anonymous insiders serve to highlight a growing crisis inside the European Patent Office (EPO), where experienced/senior examiners are walking away and leaving an irreplaceable bunch of seats (due to high experience demands)



  10. Patents Roundup: BlackBerry, Huawei, PTAB, GAO, Aggressive Universities With Patents, and Software Patents in Europe

    Various bits and pieces of news regarding patents and their fast-changing nature in the United States nowadays



  11. Glimpse at Patent Systems Across the World: Better Quality Control at the USPTO Post-America Invents Act (2011), Unlike the EPO Post-Battistelli (2010)

    While the EPO reportedly strives to eliminate pendency and appeal windows altogether (rubberstamping being optimal performance as per the yardstick du jour), the USPTO introduces changes that would strengthen the system and shield innovation, not protect the business model of serial litigants



  12. Blockstream Has No Patents, But Pledges Not to Sue Using Patents

    Blockstream says that it comes in peace when it comes to software patents, which triggers speculations about coming Blockchain patent wars



  13. Links 21/7/2016: Ubuntu 16.04.1 LTS, Linux Mint 18 “Sarah” Xfce Beta

    Links for the day



  14. Links 21/7/2016: An Honorary Degree for Alan Cox, Looks Back at DebConf16

    Links for the day



  15. EPO USA: Under Battistelli, the 'European' Patent Office Emulates All the Mistakes of the USPTO

    Conservative Benoît Battistelli is trying to impose on the European Patent Office various truly misguided policies and he viciously attacks anyone or anything that stands in his way, including his formal overseers



  16. Links 19/7/2016: ARM and Opera Buyout

    Links for the day



  17. Large Corporations' Software Patenting Pursuits Carry on in Spite of Patent Trolls That Threaten Small Companies the Most

    With unconvincing excuses such as OIN, large corporations including IBM continue to promote software patents in the United States, even when public officials and USPTO officials work towards ending those



  18. Battistelli Has Implemented De Facto EPO Coup to Remove Oversight, Give Himself Total Power, and Allegedly Give UPC Gifts (Loot) to French Officials

    Benoît Battistelli's agenda at the EPO is anything but beneficial to the EPO and suspicions that Battistelli's overall agenda is transitioning to the UPC to further his goals grow feet



  19. EPO Social [sic] Report is a Big Pile of Lies That Responsible Journalists Must Ignore

    A reminder of where the EPO stands on social issues and why the latest so-called 'social' report is nothing but paid-for propaganda for Battistelli's political ambitions



  20. Links 18/7/2016: Vista 10 a Failure, FreeType 2.7

    Links for the day



  21. Exploiting Perceived Emergencies/Disasters, Suspending the Rule of Law, and Suspending Judges: How Erdoğan is Like Battistelli, Except the Coup

    Pretexts for crackdown on law-abiding people or figureheads who are remote and independent the hallmark not only of Erdoğan but also the EPO's President, Benoit Battistelli



  22. The Impotence of Gene Quinn

    Attacking the enforcer of Alice v CLS because it's doing harm to his source of income, which makes him angry



  23. After the FTI Consulting-EPO Reputation Laundering Deal's Expansion in Germany Süddeutsche Zeitung 'Forgets' That the EPO Even Exists

    Relative apathy if not complete silence regarding the EPO at Süddeutsche Zeitung following reports of FTI Consulting's deal expansion (media positioning in Germany), with hundreds of thousands of Euros (EPO budget) thrown at the controversial task



  24. Benoît Battistelli and Persistratos

    Reminds you of someone?



  25. Whistleblower Protection Desperately Needed at the European Patent Office

    EPO scandals are not publicly accessible or known to many people and not many such scandals are known at all because people are afraid of Battistelli's Fabius Maximus strategies



  26. Microsoft and Its Patent Minions at Nokia Still Have Patent Stacking Ambitions Against Android/Linux OEMs

    Weaponisation of European companies for the sake of artificial elevation of prices (patent taxes) a growing issue for Free/Open Source software (FOSS) and those behind it are circulating money among themselves not for betterment of products but for the crippling of FOSS contenders



  27. [ES] ¿Que si la EPO Bajo Battistelli Se Arruina Sin Posibilidad de Reparación Como la UPC?

    La última evidencia alrededor del hundimiénto de la reputación de la Epo y su calidad de trabajo, así como la caída del sistema que Battistelli trata forzadamente de imponer (una carrera al fondo)



  28. [ES] La EPO de Battistelli, Quién Quiebra la Ley, Subvierte el Curso de la Justicia y Rechaza Obedecer las Ordenes de la Corte Dice lo Impensable en Medio de los Actos de Terror

    Los terribles ataques hace un dia en Francia están siéndo explotados por el caradura de Benoît Battistelli para comedia negra o un verdaderamente absurda afirmación en la sección de “noticias” de la EPO



  29. [ES] La EPO de Battistelli Continúa Cortejando a Officiales de Países Pequeños y su Propaganda de Beneficiar a las “PYMEs de Aquellos Países”

    El caradura de Benoît Battistelli prosigue desfilando en los países pequeños que tienen delegados al Consejo Administrativo (CA) y los explota para propaganda barata, no sólo para que lo apoyen en las reuniónes del CA



  30. Links 17/7/2016: Lithuanian Police Switches to GNU/Linux, Blockchain on LinuxONE

    Links for the day


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts