Stories
Slash Boxes
Comments

SoylentNews is people

posted by on Tuesday May 16 2017, @02:24AM   Printer-friendly
from the been-a-tough-month-for-windows dept.

Google Project Zero researchers Tavis Ormandy and Natalie Silvanovich claim to have found a critical vulnerability in Windows. The details of the flaw will likely be disclosed in 90 days from now even if a patch is not available.

Ormandy announced over the weekend on Twitter that he and Silvanovich had discovered "the worst Windows remote code exec [vulnerability] in recent memory."

The expert has not shared any details, but he has clarified that the exploit they created works against default Windows installations, and the attacker does not need to be on the same local area network as the victim. He also said the attack is "wormable."

[Ed - According to ghacks.net and ArsTechnica the vulnerability was in Windows Defender and has been patched by Microsoft - fnord]


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by PiMuNu on Tuesday May 16 2017, @08:34AM (1 child)

    by PiMuNu (3823) on Tuesday May 16 2017, @08:34AM (#510452)

    > Now business-men have a luxury we don't have. They have the dollar and the luxury of delegation that comes with it;
    > they do not need to know how their stuff works. Any problems can wait until business hours. No-one is going to be
    > asked to personally sacrifice their stuff because of a loss.

    Yeah and thank goodness for that - would you want boss phoning you at 3 am in the morning because some google f*cker posted an exploit on windows without give microsoft a chance to make a patch?

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 1) by anubi on Tuesday May 16 2017, @10:55AM

    by anubi (2828) on Tuesday May 16 2017, @10:55AM (#510477) Journal

    Yeah and thank goodness for that - would you want boss phoning you at 3 am in the morning because some google f*cker posted an exploit on windows without give microsoft a chance to make a patch?

    Very true!!! Can you imagine the problems businessmen would have getting anyone to implement "business-grade" systems if things like that happened?

    If I did a bad job plumbing my water heater, about the last thing I want is a 3AM call to fix the thing!

    Nobody wants to have to attend to this kind of stuff. Nobody.

    I avoid it like the plague. By design. As that's all I really have to work with. Because if I do not do it right, its ME that has to MAKE it right!

    Personal Responsibility has a hell of an impact on my mindset. I can't just simply delegate it to someone else. Neither can most of the rest of us. Poorly done crap and lack of knowing what we are doing comes directly our of our hide.

    Even though a rubber hose may be the cheapest and most universal solution, I won't use one on the water heater. For that reason.

    When I take my time to implement something, I usually mean it to last. Latest example, I flat insisted on BERU glow plugs for my diesel van... previous study on the internet told me people were having problems with the other brands of glow plugs... namely getting them back out if they ever fail.

    I try to think ahead, at least by 20 years, as things I do today can have a helluva effect on my bottom line in a few years.

    My mentor at Chevron stressed to me the very same thing.

    If I thought just for maximizing for the present quarter, I would be up to my arse in yesterday's poorly implemented crap.

    --
    "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]