Time to upgrade to XP

//
Google discloses another zero-day flaw
Posted by: Timothy Weaver on 01/16/2015 11:49 AM
Google has disclosed another flaw that affects both Win7 and Win8.


The Google Project Zero researchers said: The issue is the
implementation in CNG.sys doesn't check the impersonation level of the
token when capturing the log on session id (using
SeQueryAuthenticationIdToken) so a normal user can impersonate at
Identification level and decrypt or encrypt data for that logon
session. This might be an issue if there’s a service which is
vulnerable to a named pipe planting attack or is storing encrypted
data in a world readable shared memory section.

Although Microsoft was notified of the flaw on Oct. 17th, it was not
included in this last update Tuesday due to compatibility issues.

The Google researchers were unmoved by this and stuck to their 90-day
public disclosure deadline, publishing details of the flaw and a
proof-of-concept exploit Thursday.

Microsoft has said that they believe that researchers should work with
vendors until a fix is produced. We believe those who fully disclose a
vulnerability before a fix is broadly available are doing a disservice
to millions of people and the systems they depend upon, Chris Betz,
senior director with Microsoft’s Security Response Center, said.

However, other researchers believe that 90 days is sufficient time to
produce a fix. Robert Graham, the CTO of security research firm Errata
Security, said: Microsoft is just whining over its own inability to
respond to bugs in a timely manner after over a decade of using its
dominant position to dictate how vulnerabilities should be handled.
//

Moral of the story:
Play safe, use XP. No one programs malware for it anymore.

--
Don't be evil - Google 2004
We have a new policy - Google 2012

On 01/16/2015 01:33 PM, Shadow wrote:




snip

Moral of the story:
Play safe, use XP. No one programs malware for it anymore.




Completely illogical

Shadow wrote:

... Moral of the story: Play safe, use XP. No one programs malware for
it anymore.

Using an old operating system is interesting, but it just doesn't work
to do new things. Too many impediments.

Yes, webpages look old on Windows XP's Internet Explorer. Some of them don't
work. Outlook Express is great.
"John Doe" escreveu na mensagem
...
Shadow wrote:

... Moral of the story: Play safe, use XP. No one programs malware for
it anymore.

Using an old operating system is interesting, but it just doesn't work
to do new things. Too many impediments.

Works just fine for me system is all up to date with new chrome and mozilla
browers.


--
AL'S COMPUTERS
"Paulson" wrote in message
...
Yes, webpages look old on Windows XP's Internet Explorer. Some of them
don't work. Outlook Express is great.
"John Doe" escreveu na mensagem
...
Shadow wrote:

... Moral of the story: Play safe, use XP. No one programs malware for
it anymore.

Using an old operating system is interesting, but it just doesn't work
to do new things. Too many impediments.

On 20/01/2015 07:10, Andy wrote:
Works just fine for me system is all up to date with new chrome and mozilla
browers.


The one program that I couldn't use on XP was Internet Explorer. Not
much of a loss for most people but since I needed to test some websites
in different browsers I had to upgrade.

Tim w

Yes, of course. There are and will always be some trolls on the Internet
pretending reality doesn't exist...


"Andy" wrote:

Works just fine for me system is all up to date with new chrome and
mozilla browers.

Tim w wrote:
On 20/01/2015 07:10, Andy wrote:
Works just fine for me system is all up to date with new chrome and
mozilla
browers.


The one program that I couldn't use on XP was Internet Explorer. Not
much of a loss for most people but since I needed to test some websites
in different browsers I had to upgrade.

Tim w

On WinXP, you can use VPC2007, and virtual machines downloadable
which have Internet Explorer versions later than WinXP supports.
You don't have to upgrade anything. The last OS that VPC2007
can run, is Windows 7. So you can use the Win7 machine with
IE11 in it. For later OSes, you'd switch to VirtualBox (free),
as it can handle Windows 8 as a guest. VirtualBox supports most
all of them (but is a bit buggy running Win2K as a guest).

https://www.modern.ie/en-us/virtuali...ools#downloads

It doesn't have to cost you a cent, to test IE. I have a
grand total of 32 VMs loaded in VPC2007, and several of those
are from the modern.ie site. They're just a pain to download,
at around 4GB a piece.

Paul

You can use many differeant browsers with out useing internet explorer


--
AL'S COMPUTERS
"Tim w" wrote in message
...
On 20/01/2015 07:10, Andy wrote:
Works just fine for me system is all up to date with new chrome and
mozilla
browers.


The one program that I couldn't use on XP was Internet Explorer. Not much
of a loss for most people but since I needed to test some websites in
different browsers I had to upgrade.

Tim w