Re: OT: Windows Vista security 'rendered useless' by researchers

2008-08-14 Thread Josh Mellicker
On Aug 11, 2008, at 9:14 PM, Chipp Walters wrote: Peter, Thanks for posting this. Josh's story does appear to be a bit of a Chicken Little "the sky is falling" report. I use XP and not Vista, and according to your article, if I read it right, XP is even more vulnerable. And while I'm on multi

OT: Windows Vista security 'rendered useless' by researchers

2008-08-14 Thread Richmond Mathewson
Bob S wrote: "The real bear here that I can see is the possibility of going to a perfectly valid web site to do my banking let's say, and then having content injected into my web browser unbeknownst to me that could compromise my credentials. THAT would be pretty bad. If that is what we ar

Re: OT: Windows Vista security 'rendered useless' by researchers

2008-08-11 Thread Chipp Walters
Peter, Thanks for posting this. Josh's story does appear to be a bit of a Chicken Little "the sky is falling" report. I use XP and not Vista, and according to your article, if I read it right, XP is even more vulnerable. And while I'm on multiple XP computers up to 8+ hrs most days-- I can't reme

Re: OT: Windows Vista security 'rendered useless' by researchers

2008-08-11 Thread Peter Alcibiades
http://arstechnica.com/news.ars/post/20080811-the-sky-isnt-falling-a-look-at-a-new-vista-security-bypass.html has a more complete account. If its correct, Firefox seems to be vulnerable also, at least to some variants, but the problem is considerably less severe than represented in the popular p

Re: OT: Windows Vista security 'rendered useless' by researchers

2008-08-11 Thread Bob Sneidar
Hmmm... I think the gist of this story is that their methods are not like previous low level methods which require a fairly sophisticated degree of competency, and that they used a completely new vector. I also took note that their methodology was not SPECIFICALLY vista based as it did no

OT: Windows Vista security 'rendered useless' by researchers

2008-08-11 Thread Richmond Mathewson
I just love phrases like 'rendered useless'. Now I am not a great fan of MicroSoft products, but: I ran a Pentium 3 with Windows 2000 for a year; running about 16 hours a day, with not a single virus, trojan or relative of pinocchio causing problems. How did I do it? 1. By realising that the m

Re: OT: Windows Vista security 'rendered useless' by researchers

2008-08-10 Thread Chipp Walters
On Sun, Aug 10, 2008 at 9:56 PM, Josh Mellicker <[EMAIL PROTECTED]> wrote: > If this is indeed 'unfixable', some organizations concerned about these > attacks might consider a migration to OS X? Wouldn't it be much easier to just switch browsers from IE to Firefox? ___

Re: OT: Windows Vista security 'rendered useless' by researchers

2008-08-10 Thread Josh Mellicker
Oops, this is the link I meant to post: http://www.neowin.net/news/main/08/08/08/vista39s-security-rendered-completely-useless-by-new-exploit On Aug 10, 2008, at 7:56 PM, Josh Mellicker wrote: Two security researchers have developed a new technique that essentially bypasses all of the memory

OT: Windows Vista security 'rendered useless' by researchers

2008-08-10 Thread Josh Mellicker
Two security researchers have developed a new technique that essentially bypasses all of the memory protection safeguards in the Windows Vista operating system, an advance that many in the security community say will have far-reaching implications not only for Microsoft, but also on how the