Full Disclosure mailing list archives
Re: Security Alert: Unofficial IE patches appear on internet
From: n3td3v <n3td3v () gmail com>
Date: Tue, 28 Mar 2006 22:30:04 +0100
On 3/28/06, bart.lansing () hushmail com <bart.lansing () hushmail com> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Opinion on actual topic forthcoming: As someone not hiding behind a pseudo-leet handle, who actually does get to deal with ramifications of Microsoft's (and others, of course) patch policies, I heartily endorse the release of the eEye patch as beneficial and as a patch that will be in the hands of large numbers of users outside the infosec community in short order. In fact, it already is. The Washington Post, ComputerWorld, ZDNet, Business Wire, The Register, and a host of others are all publicing its existence...kudos to them.
I would laugh if this wasn't such a serious issue, but even if its mentioned on those sites, thats still not effective enough to give a safe alternative to a Micrsoft patch, which is delivered almost automatically since service pack two. To say your average single mom or eldery couple can be relied on to visit those sites you've mentioned, (much of them U-S based), is frankly a complete joke for a world-wide bug effecting world wide end user systems. Single moms, eldery couples, visit your nearest U-S based news outlet for patches! Oh, I can see the mess which is about to unfold as soon as you confuse the consumer about that, and before you do that, should you give the consumer a list of "safe U-S media news sites". You can bet the phishers are going to setup web pages, and perhaps even claiming via e-mail that Zdnet or whatever is telling them about a third party patch "click here to download" or "click here to visit the eeye website". Great stuff, you must admit. No seriously.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Security Alert: Unofficial IE patches appear on internet, (continued)
- Re: Security Alert: Unofficial IE patches appear on internet Micheal Espinola Jr (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet Matthew Murphy (Mar 28)
- RE: Security Alert: Unofficial IE patches appearon internet William Lefkovics (Mar 28)
- Re: Security Alert: Unofficial IE patches appear oninternet GroundZero Security (Mar 29)
- Re: Security Alert: Unofficial IE patches appear oninternet n3td3v (Mar 29)
- Re: Security Alert: Unofficial IE patches appearoninternet (off topic) GroundZero Security (Mar 29)
- Re: Security Alert: Unofficial IE patches appear oninternet crazy frog crazy frog (Mar 29)
- Re: Security Alert: Unofficial IE patches appear oninternet n3td3v (Mar 29)
- Re: Security Alert: Unofficial IE patches appear on internet n3td3v (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet Valdis . Kletnieks (Mar 28)
- RE: Security Alert: Unofficial IE patches appear oninternet William Lefkovics (Mar 28)