ITinfo: Microsoft Assures FBI Windows Can Be Secured

Site Directory
Membership
Train-the-Trainer
Trainer Certification
Certified Training Materials
ITinfo E-zine
Responsible Training
White Papers
Trainer Resources
What's New
Speaking Engagements
Onsite Training
ITrain Gear

Windows Users Urged To Patch

Four versions of Windows affected

ITinfo Sponsor

ERROR: Random File Unopenable

The random file, as specified in the $random_file perl variable was unopenable.

The file was not found on your file system. This means that it has either not been created or the path you have specified in $trrandom_file is incorrect.

Microsoft Assures FBI Windows Can Be Secured

by Dave Murphy
ISSN 1535-3613

The U.S. Federal Bureau of Investigation (FBI), U.S. Defense Department, and top industry experts talked with Microsoft Corp. executives yesterday to seek assurance that free software fix to Windows 98, Windows Me and Windows XP will prevent hackers from exploiting major flaws in the popular operating systems. Microsoft's experts openly acknowledged the threats posed by the Windows XP problems, but they assured federal officials and industry experts that its fix - if installed by consumers - resolves the issues.

The government's interest demonstrates the level of concern that's present regarding attacks that could be initiated against Internet resources and our electronic infrastructure, until the software patch was released. The meetings were initiated by the FBI's National Infrastructure Protection Center (NIPC), its top cyber-security unit.

Windows XP, Windows 98 and Windows Me, according to Microsoft's security site, suffer from serious problems that allow hackers to remotely steal or destroy a victim's data files when the victim's computer accesses the Internet.

Dave's Opinion

The security flaw arises from an unchecked buffer compromise that affects the Universal Plug and Play system of the operation systems. Users of Windows Me or Windows XP, as well as users of Windows XP Internet Connection Sharing client on Windows 98 or Windows 98SE (Second Edition) are at risk of the security vulnerability.

Microsoft's site uses the following words in describing who should install the patch: "Microsoft strongly urges all Windows XP customers to apply the patch immediately. Customers using Windows 98, 98SE or Me should apply the patch if the Universal Plug and Play service is installed and running." I don't recall ever reading that Microsoft "strongly urging" users to quickly install patches. This security flaw must really be serious.

Check below for a link to Microsoft's security site which prominently displays a hyperlink to the free patch download.

Call for Comments

What do you think? Leave your comments on the message center.

References

Microsoft Security Center
Message Center

Previous issues are on our website at http://itrain.org/itinfo/.

International Association of Information Technology Trainers
PMB 616
6030-M Marshalee Dr
Elkridge, MD 21075-5987

410.567.5366
1.888.290.6200
fax: 801.650.0423
Membership Director: member@itrain.org

Return to ITrain Homepage

http://itrain.org/itinfo/2001/it011221.html
updated December 21, 2001