SoylentNews is people
SoylentNews
It has been nine days since Microsoft patched the high-severity vulnerability known as BlueKeep, and yet the dire advisories about its potential to sow worldwide disruptions keep coming.
Until recently, there was little independent corroboration that exploits could spread virally from computer to computer in a way not seen since the WannaCry and NotPetya worms shut down computers worldwide in 2017. Some researchers felt Microsoft has been unusually tight-lipped with partners about this vulnerability, possibly out of concern that any details, despite everyone's best efforts, might hasten the spread of working exploit code.
Until recently, researchers had to take Microsoft's word the vulnerability was severe. Then five researchers from security firm McAfee reported last Tuesday that they were able to exploit the vulnerability and gain remote code execution without any end-user interaction. The post affirmed that CVE-2019-0708, as the vulnerability is indexed, is every bit as critical as Microsoft said it was.
"There is a gray area to responsible disclosure," the researchers wrote. "With our investigation we can confirm that the exploit is working and that it is possible to remotely execute code on a vulnerable system without authentication."
Further Reading:
https://arstechnica.com/information-technology/2019/05/microsoft-warns-wormable-windows-bug-could-lead-to-another-wannacry/
Entry in the "Common Vulnerabilities and Exposures" database: CVE-2019-0708.
(Score: 2) by RS3 on Sunday May 26 2019, @04:46AM
Features!
But seriously, you're not making a fair comparison. Linux is FREE. I paid my M$ tax and got swiss cheese. My free Linux is much more stable, and the community generally (GENERALLY) fixes bugs much faster than MS.
Do you own MS stock, or work for MS?
Look, truth be told, I understand the whole situation. An OS is enormously complex, and it's difficult to know all of the possible interactions with the very wide range of software out there. MS has done a truly stellar job of supporting older applications running on newer OS. They do many things well, esp. tutorials and example code. I just wish they'd commit to finishing an OS. Maybe they will with 10. Time will tell.