Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
Re: Vista "complaints" Feb 27 2007 02:48PM
Thor (Hammer of God) (thor hammerofgod com) (1 replies)
My thoughts? Well, I'll tell you ;)

Complete and utter FUD. Plain and simple. And while I hate to say it,
reading stuff like that makes me wonder if Whitehouse has any more grasp on
reality than the man inhabiting our own Whitehouse today.

Let's note this passage about what would have to happen *first*:

"The most likely scenario is that a user gets compromised by malicious code,
from a Trojan [horse] or a vulnerability in a third-party application like
Office or a browser."

Oh, the awe a magician can inspire after "The Magic Rooting" takes place.
The UAC would, of course, prevent this from happening in the first place. I
also doubt the "magic assumptions" of "most users would just click through
without a second thought." No, users would have to enter the admin username
and password to install the malicious code to begin with. If they are
running as admin, then they would have the opportunity of looking at what
they were running, as well as the standard "This is from an unknown
publisher" dialog even after "just clicking continue." But you wouldn't be
running as administrator, now would you? No, you wouldn't. There are other
technical inaccuracies, but I won't bother going into them because what
comes after "if I can get this installed on the box" simply doesn't matter.

In general, I find ramblings about what diabolical exploits can be crafted
*after* you get whatever code you need installed on the box to be comical.
But when they come from someone who should absolutely know (far) better, it
is simply unprofessional, and comes off like the proverbial "grasping at
straws" for attention. I believe it was Will Rogers who said "People who pay
for things rarely complain. It's the people you give things to that you
can't please" or something along those lines. Read: People will always find
something to complain about, and will often go way out of their way to find
justification for it.

Status: Debunked. ;)

And that is the skinny on that.

t

On 2/26/07 8:58 PM, "Murda Mcloud" <murdamcloud (at) bigpond (dot) com [email concealed]> spoketh to all:

> What are your thoughts on this Thor?
> http://www.pcworld.com/article/id,129268/article.html
>
> (Surprise surprise ./ are loving this)
>

[ reply ]
RE: Vista "complaints" Feb 27 2007 07:37PM
Devin Ganger (DevinG 3sharp com) (1 replies)
RE: Vista "complaints" Feb 27 2007 09:15PM
Jim Harrison (Jim isatools org) (1 replies)
RE: Vista "complaints" Feb 27 2007 09:30PM
Devin Ganger (DevinG 3sharp com) (1 replies)
More on Vista "complaints" Feb 28 2007 03:51AM
M. Burnett (mb xato net)







 

Privacy Statement
Copyright 2009, SecurityFocus