Hard Light Productions Forums
Off-Topic Discussion => General Discussion => Topic started by: Liberator on September 09, 2002, 09:50:10 pm
-
This is not a joke post.
TechTV has released information about a massive security vulnerability in ALL verisons of Windows XP(Home, Professional, even Enterprise).
If you are running Windows XP you must DL the Service Pack to fix the problem.
Let's just say that it's bad enough to possibly induce a recall of all currently unsold copies of Windows XP.
This is from GRC.com...
This vulnerability allows the files contained in any specified directory on your system to be deleted if you click on a specially formed URL. This URL could appear anywhere: sent in malicious eMail, in a chat room, in a newsgroup posting, on a malicious web page, or even executed when your computer merely visits a malicious web page. It is likely to be widely exploited soon.
This vulnerability is so dangerous that it would be irresponsible for me to say more. Microsoft has known of this problem for months and has, inexplicably, done nothing before now. Although XP's Service Pack 1 is not small (approx 30 MB for express installation or 140 MB for the network install), and even though a much quicker and easier solution to this problem exists, the only thing I can safely recommend (without revealing too much) is to urge all XP users to somehow obtain and install Service Pack 1 immediately. (If you have a slow Internet connection, perhaps a friend can download the executable Service Pack file and burn it onto a CD for you?)
This problem does not affect any systems other than Windows XP. If you have any friends or co-workers running Windows XP, please urge them to update their systems' too. Once the details of this vulnerability have leaked through other channels I will provide additional information.
To visit Microsoft's Windows XP Service Pack 1 download page: http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.asp
-
DL Service Pack 1?!?! **** that.
1: Open search
2: Put "uplddrvinfo.htm" (without quotes)as your search word
3: Put "C:\windows\pchealth" (without quotes)as your directory to search.
4: When it finds the file, delete it or rename it to anything.
There, a simple solution for a complicated problem.
NOTE: Microsoft's suits will be knocking on my door tomarrow...:nervous: :nervous: :shaking: :nervous: :nervous:
-
I said that DLing Service Pack 1 is the easy way, for anyone who is not comfortable editing or removing files from the OS folder(s).
-
Fixed, but I planned to nab SP1 anyways.
-
I'm aprehensive of the SP, I've heard it gives MS more control over your system than is good for you. It also makes "trial running" their software damn difficult, which is the only sensible way to see if XP is any good or not.
-
Man M$ should get thier asses sued off for this this. Its just damned silly!
-
Originally posted by demon442
DL Service Pack 1?!?! **** that.
1: Open search
2: Put "uplddrvinfo.htm" (without quotes)as your search word
3: Put "C:\windows\pchealth" (without quotes)as your directory to search.
4: When it finds the file, delete it or rename it to anything.
There, a simple solution for a complicated problem.
NOTE: Microsoft's suits will be knocking on my door tomarrow...:nervous: :nervous: :shaking: :nervous: :nervous:
And that really solves the security issue?
Does it affect anything else... or does it cause any problems?
-
Originally posted by Gortef
And that really solves the security issue?
Does it affect anything else... or does it cause any problems?
I hope not, because I already did it. Oo;; Methinks I should let others serve as guinea pigs next time...
-
heh im glad idont have xp
mircosoft just plain sucks dont ya think?
-
1. Microsoft makes new OS
2. Microsoft knows that people will crack all anti-piracy systems in it
3. Microsoft knows that people will find ways to remove all spyware inside
4. Microsoft don't want people to do that
5. Microsoft leaves blatant security problem, that forces people to update
6. Microsoft releases bugfix, which "fixes" the "cracks" that people made up to now
-
Originally posted by Styxx
1. Microsoft makes new OS
2. Microsoft knows that people will crack all anti-piracy systems in it
3. Microsoft knows that people will find ways to remove all spyware inside
4. Microsoft don't want people to do that
5. Microsoft leaves blatant security problem, that forces people to update
6. Microsoft releases bugfix, which "fixes" the "cracks" that people made up to now
You forgot:
7. i++
8. if (i < 5) { GOTO LINE 5 } else continue
9. GOTO LINE 1
-
yeah, if you have an "illegal" version then you can't update
lol, when i saw "houston" i was like "what!?" lol (my city) :D
-
Originally posted by Sandwich
You forgot:
7. i++
8. if (i < 5) { GOTO LINE 5 } else continue
9. GOTO LINE 1
Ah, yes. There's that too. :p
-
Or the secret lines of code which crash Hotmail if you use a netscape browser...............
-
Originally posted by Stealth
yeah, if you have an "illegal" version then you can't update
lol
aww great! i screwed!
or i can delete that lil file thingy...... :devil:
-
Originally posted by aldo_14
Or the secret lines of code which crash Hotmail if you use a netscape browser...............
Used to be: If u install Internet Explorer on top of Netscape, IE would kill Netscape.
-
Really? With mine it just corrupted both quite badly.
-
**** i updated a bit ago and as soon as i restarted my comp, i got "Critical System Failures" everywhere and My Virus check went off like crazy.....
M is still "performing an inventory" of my files and data and i think i can guess on what's goin on there...
-
Originally posted by Gortef
And that really solves the security issue?
Does it affect anything else... or does it cause any problems?
As far as I (or The ScreenSavers) can tell nothing is messed up by deleting the file. But its only been a day since i've done it, so i'd suggest make a backup in a seperate directory and deleting the original.
EDIT: Of course it solves the security issue. Do you think i'd put destructive info on the [sucking up] Greatest BB On the Net [/sucking up]
-
I think this is a very good time to upgrade to linux people
www.debian.org
www.gentoo.org
www.linux.org
yes, you want to :D
-
or do a dastardly triple boot with 98se, 2k, and Linux (what I'm planning on doing sometime next week).
Except there's no support for 98se anymore...oh, well...maybe use ME with a good memory manager...
-
Originally posted by JC Denton
or do a dastardly triple boot with 98se, 2k, and Linux (what I'm planning on doing sometime next week).
Except there's no support for 98se anymore...oh, well...maybe use ME with a good memory manager...
I do exactly that, I have 98, 2k and debian. I might quad with something else sometime.. :D
-
heh, 40 gb isn't hardly enough for 4 OSes...guess I'd better spring for an extra 80gb.
BTW, I'm going to use Mandrake Linux 9 beta 3 (because I already have burned on CD). Unless someone has a better suggestion?
-
I definitely recommend debian, gentoo or sorcerer than any other linux version... (well maybe not all...)
The reason being the update style. For things like redhat, mandrake, slackware etc. you have to go through update hell each time a new kernel is released or a major change is implemented...
With debian you just click "update" and go get a coffee and check it occasionally. It's that simple.
So actually I recommend debian of those three 'cause it's probably the most widely supported.
(by the way I have 3 OSs on this 8 gig drive :p)
Edit: Read this: http://www.distrowatch.com/article-rpm.php
-
Is there somewhere I can get the full CD without ordering it? The Debian site only has the minimalist downloadable ISO.
-
I haven't seen debian being sold in stores but I live in a relatively small city so. You'd probably have to order or downlaod though.
-
Originally posted by demon442
As far as I (or The ScreenSavers) can tell nothing is messed up by deleting the file. But its only been a day since i've done it, so i'd suggest make a backup in a seperate directory and deleting the original.
EDIT: Of course it solves the security issue. Do you think i'd put destructive info on the [sucking up] Greatest BB On the Net [/sucking up]
Thanks for the info
and sorry I didn't mean to question you reliability
I just wanted to be sure that's all... :p
-
ok, let say I install linux. and then? I throw 3dsmax, renegade, photoshop, fs2, etc, etc etc, away?
-
Originally posted by Kamikaze
I do exactly that, I have 98, 2k and debian. I might quad with something else sometime.. :D
Heh - exactly the setup I'm gonna have once I get the time to install Linux. :)
-
Originally posted by venom2506
ok, let say I install linux. and then? I throw 3dsmax, renegade, photoshop, fs2, etc, etc etc, away?
let's pick this list apart....
3ds - use an emulator
renegade - use an emulator
photoshope - switch to gimp :p
fs2 - emulator (and it's being converted...)
and so on.
OR
you could use lindoes instead, or you could even run linux on top of winxp.