Sunday, April 1, 2007
Saturday, March 31, 2007
ANI vulnerability 3rd party patch available
A 3rd party patch to mitigate exposure to the ANI vulnerability (mouse animated curser) is available free to the public.
I have been testing it this evening and it appears to be effective and safe.
If you run any browser or email client on the Windows 2000, XP, 2003 or Vista platform, you might consider this patch until Microsoft releases their official patch.
http://research.eeye.com/html/alerts/zeroday/20070328.html
The link to the patch is at the very bottom of that page.
I have been testing it this evening and it appears to be effective and safe.
If you run any browser or email client on the Windows 2000, XP, 2003 or Vista platform, you might consider this patch until Microsoft releases their official patch.
http://research.eeye.com/html/alerts/zeroday/20070328.html
The link to the patch is at the very bottom of that page.
FireFox also vulnerable to the ANI exploit
From BugTraq at http://seclists.org/bugtraq/2007/Mar/0461.html
"Determina also discovered that under certain circumstances Mozilla Firefox uses the same underlying Windows code for processing ANI files, and can be exploited similarly to Internet Explorer."
Best to be practicing ultra safe web habits until a patch is released. Also (as usual) keep your Spyware shields and AV updated.
"Determina also discovered that under certain circumstances Mozilla Firefox uses the same underlying Windows code for processing ANI files, and can be exploited similarly to Internet Explorer."
Best to be practicing ultra safe web habits until a patch is released. Also (as usual) keep your Spyware shields and AV updated.
ANI vulnerability: Windows Zero Day attack
The last few days saw the discovery of another very serious exploit that takes advantage of a bug in the way Windows XP, Vista and 2003 and Outlook handles animated mouse cursers. A longer list of all vulnerable products is available here. Microsoft has no fix available yet.
As of at least yesterday (and probably longer) researchers have found numerous web sites that are delivering malicious Trojans via this vector. Craig Schmugar at McAfee reports that this includes some fairly popular and supposedly trustworthy sites like the Dolphins Superbowl site, which is compromised and forwards visiters to non-trusted servers.
So far the best advice is to completely turn off email previewing in all versions of Outlook and Outlook Express, to help mitigate infection via spam. Don't open any spam, especially unexpected emails with attachments. And finally don't visit infected websites - which begs the question of how would we know it's infected?
Until a patch is available, be extra careful!
As of at least yesterday (and probably longer) researchers have found numerous web sites that are delivering malicious Trojans via this vector. Craig Schmugar at McAfee reports that this includes some fairly popular and supposedly trustworthy sites like the Dolphins Superbowl site, which is compromised and forwards visiters to non-trusted servers.
So far the best advice is to completely turn off email previewing in all versions of Outlook and Outlook Express, to help mitigate infection via spam. Don't open any spam, especially unexpected emails with attachments. And finally don't visit infected websites - which begs the question of how would we know it's infected?
Until a patch is available, be extra careful!
Friday, March 30, 2007
Microsoft's future
I know at least one of the people on my friends list is currently employed by MS. I suspect one or two others may be as well.
If you don't already follow the two bloggers linked below, their most recent articles really seem to nail some of the company's issues, and contain some excellent suggestions to improve things. Assuming of course that's even a remote possibility. (Doubt)
Long reads, but good.
http://msftextrememakeover.blogspot.com/2007/03/for-want-of-shoe-or-time-for-new-rider.html
http://minimsft.blogspot.com/2007/03/mini-devil-and-fine-whine.html
Enjoy . . .
If you don't already follow the two bloggers linked below, their most recent articles really seem to nail some of the company's issues, and contain some excellent suggestions to improve things. Assuming of course that's even a remote possibility. (Doubt)
Long reads, but good.
http://msftextrememakeover.blogspot.com/2007/03/for-want-of-shoe-or-time-for-new-rider.html
http://minimsft.blogspot.com/2007/03/mini-devil-and-fine-whine.html
Enjoy . . .
Thursday, March 29, 2007
If you have a cat or dog . . .
Thought you might want to know about this:
http://www.sciam.com/article.cfm?articleID=9AA80BDC-E7F2-99DF-325B0C8F34C09E95
Turns out that the recalled pet food was contaminated by something called aminopterin, used in China (among other places) as a rat poison. Possibly came from gluten obtained from China, to be used as a thickener for the gravy in recalled wet pet foods.
"The Food and Drug Administration (FDA) reports that the lethal concentration of the chemical is three parts per million (ppm) for rats; the amount found in the contaminated [pet] food samples was 40 ppm. There is speculation that the poison got into the chow because Chinese farmers sprayed their crops, including wheat, with it to protect them from hungry rodents."
Two of my neighbors lost their cats last week during my absence to this poison. I am really grateful that we have fed our cat more healthy fare for her entire life than wet canned pet food.
Also there are reports around the Internet that canned pet food from outside the range of batches and dates specified by the manufacterer are also poisoning pets.
If somehow you did not see the news all last week about the recall, here is the main official page for you with links to the official brands, types and batches involved.
http://www.fda.gov/bbs/topics/NEWS/2007/NEW01590.html
.
http://www.sciam.com/article.cfm?articleID=9AA80BDC-E7F2-99DF-325B0C8F34C09E95
Turns out that the recalled pet food was contaminated by something called aminopterin, used in China (among other places) as a rat poison. Possibly came from gluten obtained from China, to be used as a thickener for the gravy in recalled wet pet foods.
"The Food and Drug Administration (FDA) reports that the lethal concentration of the chemical is three parts per million (ppm) for rats; the amount found in the contaminated [pet] food samples was 40 ppm. There is speculation that the poison got into the chow because Chinese farmers sprayed their crops, including wheat, with it to protect them from hungry rodents."
Two of my neighbors lost their cats last week during my absence to this poison. I am really grateful that we have fed our cat more healthy fare for her entire life than wet canned pet food.
Also there are reports around the Internet that canned pet food from outside the range of batches and dates specified by the manufacterer are also poisoning pets.
If somehow you did not see the news all last week about the recall, here is the main official page for you with links to the official brands, types and batches involved.
http://www.fda.gov/bbs/topics/NEWS/2007/NEW01590.html
.
Tuesday, March 13, 2007
Windows Server 2003 SP2 released today
I lied, one more update today before I go finish packing.
Microsoft quietly released Service Pack 2 for Windows Server 2003 - all editions. Their website calls it a release candidate, but given it's presence on the official update site, I suspect it's the final version.
You can get it via the update site, or if you prefer (as I do) to get it as one download and apply it offline, you can get the entire package here:
http://www.microsoft.com/technet/windowsserver/sp2.mspx
Along with a complete rollup of all critical updates released since SP1, it also includes some new features, which depend on whether you are running the standard, R2 or SMS versions.
See the FAQs for more information.
http://www.microsoft.com/technet/windowsserver/sp2/top-reasons.mspx
http://www.microsoft.com/technet/windowsserver/sp2/faq.mspx
And now I am outta here - see you in two weeks!
Microsoft quietly released Service Pack 2 for Windows Server 2003 - all editions. Their website calls it a release candidate, but given it's presence on the official update site, I suspect it's the final version.
You can get it via the update site, or if you prefer (as I do) to get it as one download and apply it offline, you can get the entire package here:
http://www.microsoft.com/technet/windowsserver/sp2.mspx
Along with a complete rollup of all critical updates released since SP1, it also includes some new features, which depend on whether you are running the standard, R2 or SMS versions.
See the FAQs for more information.
http://www.microsoft.com/technet/windowsserver/sp2/top-reasons.mspx
http://www.microsoft.com/technet/windowsserver/sp2/faq.mspx
And now I am outta here - see you in two weeks!
Taking a break
I will be offline for two weeks and spending some quality time underwater. See you all after the break!
Monday, March 12, 2007
This is NOT a Meme, it's a quiz
1. Can you cook?
I've been told I can. Never destroy a perfectly good hobby by turning it into a job.
2. What was your dream growing up?
To be an astronaut. No, really. It was not until I applied for the program that I discovered that mild color blindness grounds you. For life.
3. What talent do you wish you had?
I wish I could . . . predict the stock market! Yeah, that's it. Complete failure of the world economy to follow shortly after.
4. Favorite place?
There are no single favorites of anything in my life, I am way more complex than that . . . but a few of the top preferences that come to my mind at this moment in space and time are: underwater reefs, on a winding less traveled road with my cycle,between her legs never mind that question now, NEXT!
5. Favorite vegetable?
I like em all. No, really.
6. What was the last book you read?
Just finished "Forty Signs Of Rain" by Kim Stanley Robinson. Started it's sequel last night: "Fifty Degrees Below."
7. What zodiac sign are you?
Aquarius. And I have to say that most horrorscope writers hate Aquarians - likely because they totally misunderstand us. But that's okay, cause we definitely understand them. [evil grin]
8. Any tattoos and/or piercings?
I keep showing up at the parlor, but then I wimp out. So no, not yet.
9. Worst habit?
Smoking. Bleah.
10. Do we know each other outside of LJ?
Of course we do, but we may never realize the connection in this lifetime. See question seven. :)
11. What is your favorite sport?
I don't think any of the activities I prefer could really be called sport. Instead, I indulge in a rather large selection of hobbies. Scuba, motorcycles, singing, stunt kites, the occasional online role-playing game, plus about a dozen more odd things.
12. Negative or optimistic attitude?
Yes.
13. What would you do if you were stuck in an elevator with me?
The real question is, what would YOU want me to do if you were stuck in that elevator with me?
14. Worst thing to ever happen to you?
Not going to tell that story here, sorry.
15. Tell me one weird fact about you:
I was killed in WW-I and was reborn without completing the normal memory flush. I still wake up from flashbacks to the trenches in Europe. Evidence also suggests this might not be the first time I failed to survive a war in the last two millennium . . . which is why so many people that meet me in real life suggest I have a very old spirit.
16. Do you have any pets?
Cat, one, cute, very old, very loving.
17. Do you know how to do the Macarena?
I know how, but I hope to never willingly repeat that offense again in the foreseeable future.
18. What time is it where you are now?
Mountain Time.
19. Do you think clowns are cute or scary?
Yes.
20. If you could change one thing about how you look, what would it be?
Nothing at all my friend, nothing at all. No, really.
21. Would you be my crime partner or my conscience?
Conscience. A rather brutal one at that according to my friends.
22. What color eyes do you have?
Brown.
23. Ever been arrested?
Many times every day. At red lights, stop signs, whenever pedestrians cross. Ah. Wait. Sorry, I thought you meant the other definition of that word.
Nope.
24. Bottle or Draft?
I like a wee bit of the dram, preferably well aged, single malt, decent pedigree. Isle of Sky being near the top-o-that list.
25. If you won $10,000 dollars today, what would you do with it?
Loan it to someone that needed money.
26. What kind of bubble gum do you prefer to chew?
Yuck! Bad question, NEXT!
27. What's your favorite bar to hang at?
My home bar. Especially now that the pool table is setup. Saves on DUI concerns too.
28. Do you believe in ghosts?
Of course! It would be rather silly for someone in my position *not* to believe.
29. Favorite thing to do in your spare time?
I have no spare time, at least not intentionally. I am either busy with work, or friends, or hobbies, or resting. I can and will spare none of that.
30. Do you swear a lot?
Hell no. Why the fuck you asking?
31. Biggest pet peeve?
People that swear inappropriately. Swear words are very effective as punctuation, not so much as filler.
32. In one word, how would you describe yourself?
Eclectic
33. Will you repost this so I can fill it out and do the same for you?
You do what you want with this, I am just glad the quiz is done!
.
I've been told I can. Never destroy a perfectly good hobby by turning it into a job.
2. What was your dream growing up?
To be an astronaut. No, really. It was not until I applied for the program that I discovered that mild color blindness grounds you. For life.
3. What talent do you wish you had?
I wish I could . . . predict the stock market! Yeah, that's it. Complete failure of the world economy to follow shortly after.
4. Favorite place?
There are no single favorites of anything in my life, I am way more complex than that . . . but a few of the top preferences that come to my mind at this moment in space and time are: underwater reefs, on a winding less traveled road with my cycle,
5. Favorite vegetable?
I like em all. No, really.
6. What was the last book you read?
Just finished "Forty Signs Of Rain" by Kim Stanley Robinson. Started it's sequel last night: "Fifty Degrees Below."
7. What zodiac sign are you?
Aquarius. And I have to say that most horrorscope writers hate Aquarians - likely because they totally misunderstand us. But that's okay, cause we definitely understand them. [evil grin]
8. Any tattoos and/or piercings?
I keep showing up at the parlor, but then I wimp out. So no, not yet.
9. Worst habit?
Smoking. Bleah.
10. Do we know each other outside of LJ?
Of course we do, but we may never realize the connection in this lifetime. See question seven. :)
11. What is your favorite sport?
I don't think any of the activities I prefer could really be called sport. Instead, I indulge in a rather large selection of hobbies. Scuba, motorcycles, singing, stunt kites, the occasional online role-playing game, plus about a dozen more odd things.
12. Negative or optimistic attitude?
Yes.
13. What would you do if you were stuck in an elevator with me?
The real question is, what would YOU want me to do if you were stuck in that elevator with me?
14. Worst thing to ever happen to you?
Not going to tell that story here, sorry.
15. Tell me one weird fact about you:
I was killed in WW-I and was reborn without completing the normal memory flush. I still wake up from flashbacks to the trenches in Europe. Evidence also suggests this might not be the first time I failed to survive a war in the last two millennium . . . which is why so many people that meet me in real life suggest I have a very old spirit.
16. Do you have any pets?
Cat, one, cute, very old, very loving.
17. Do you know how to do the Macarena?
I know how, but I hope to never willingly repeat that offense again in the foreseeable future.
18. What time is it where you are now?
Mountain Time.
19. Do you think clowns are cute or scary?
Yes.
20. If you could change one thing about how you look, what would it be?
Nothing at all my friend, nothing at all. No, really.
21. Would you be my crime partner or my conscience?
Conscience. A rather brutal one at that according to my friends.
22. What color eyes do you have?
Brown.
23. Ever been arrested?
Many times every day. At red lights, stop signs, whenever pedestrians cross. Ah. Wait. Sorry, I thought you meant the other definition of that word.
Nope.
24. Bottle or Draft?
I like a wee bit of the dram, preferably well aged, single malt, decent pedigree. Isle of Sky being near the top-o-that list.
25. If you won $10,000 dollars today, what would you do with it?
Loan it to someone that needed money.
26. What kind of bubble gum do you prefer to chew?
Yuck! Bad question, NEXT!
27. What's your favorite bar to hang at?
My home bar. Especially now that the pool table is setup. Saves on DUI concerns too.
28. Do you believe in ghosts?
Of course! It would be rather silly for someone in my position *not* to believe.
29. Favorite thing to do in your spare time?
I have no spare time, at least not intentionally. I am either busy with work, or friends, or hobbies, or resting. I can and will spare none of that.
30. Do you swear a lot?
Hell no. Why the fuck you asking?
31. Biggest pet peeve?
People that swear inappropriately. Swear words are very effective as punctuation, not so much as filler.
32. In one word, how would you describe yourself?
Eclectic
33. Will you repost this so I can fill it out and do the same for you?
You do what you want with this, I am just glad the quiz is done!
.
Saturday, March 10, 2007
Subscribe to:
Posts (Atom)