RE: WinXP SP2 comments (was: Internet explorer 6 execution of arbitrary code)

["Scott Phelps" <scottp () dreamwright com>]

I would really watch out if trying an uninstall of SP2.

My understanding is that the size of it (something like 270 M) is because
you get a lot of recompiled binaries adding buffer overflow protection. It
wouldn't surprise me if a few things are left behind after an uninstall.


Scott P

"They that can give up essential liberty to obtain a little temporary safety
deserve neither liberty nor safety"
Benjamin Franklin, 1759


-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of Poof
Sent: Monday, June 07, 2004 1:12 AM
To: 'Chris Carlson'; 'Jelmer'
Cc: full-disclosure () lists netsys com
Subject: RE: [Full-disclosure] WinXP SP2 comments (was: Internet explorer 6
execution of arbitrary code)

> While the new "security center" complains about how I don't have a
> firewall or antivirus installed (it doesn't detect either), the better
> security more than makes up for this minor annoyance - I no longer need to
> worry about where I go because the simple yet absolute 'no popups' and 'no
> software installations' security settings lock IE down so well.

Well, the "Security Center" will only detect your firewall/antivirus if the
program tells Windows that it's protecting your computer. (New API Microsoft
did... Many companies are using it now.)

> A note about the security center- I *think* it can be disabled by editing
> the %systemroot%\inf\sysoc.inf file to show the entry for it in add/remove
> windows components.  I've tried to do this, but it either does not have
> immediate results, or does not work.  I havn't done any real research on
> it because of a lack of time (or perhaps patience), but would like to know
> how to get rid of this if anyone knows.

Well, all you have to do to disable it... Is disable the "Security Center"
service in the services.msc! Gasp! Easy. =)

BTW. Uninstalling a service pack isn't 100% supported. It's recommended to
wipe and reinstall.

~

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html