Re: [nottingham] Win32 security... rather Insecurity

From: darylpearson@ntlworld.com
Date: Thu 08 Aug 2002 - 20:32:23 BST


All I can say is good old Microsoft!

Daryl (^_^)

On 7 Aug 2002 at 20:02, Robert Davies wrote:

> This paper presents a new generation of attacks against Microsoft Windows,
> and possibly other message-based windowing systems. The flaws presented in
> this paper are, at the time of writing, unfixable. The only reliable solution
> to these attacks requires functionality that is not present in Windows, as
> well as efforts on the part of every single Windows software vendor.
> Microsoft has known about these flaws for some time; when I alerted them to
> this attack, their response was that they do not class it as a flaw - the
> email can be found here. This research was sparked by comments made by
> Microsoft VP Jim Allchin who stated, under oath, that there were flaws in
> Windows so great that they would threaten national security if the Windows
> source code were to be disclosed. He mentioned Message Queueing, and
> immediately regretted it.
>
> http://security.tombom.co.uk/shatter.html
> http://security.tombom.co.uk/response.txt
>
> Might be relevant to anyone having to make a case for the suits
>
> Rob
> --------------------------------------------------------------------
> http://www.lug.org.uk http://www.linuxportal.co.uk
> http://www.linuxjob.co.uk http://www.linuxshop.co.uk
> --------------------------------------------------------------------

--------------------------------------------------------------------
http://www.lug.org.uk http://www.linuxportal.co.uk
http://www.linuxjob.co.uk http://www.linuxshop.co.uk
--------------------------------------------------------------------



This archive was generated by hypermail 2.1.3 : Thu 08 Aug 2002 - 20:29:39 BST