The rediculousness of postings on security lists and commercial 'security sites' sites is directly comparable to the "DoS exploits" of IE and Firefox, where the announcement merely includes code which fills up your system memory with useless data. Arguably, if the system locks up you can say that this is an OS problem with the process scheduler, not the browser (which is carrying out proper fucntionality).

The post regarding this funcionality (of cmd not picking up the stream data) when origonally posted, recieved strong response from various individuals, some quoting that they DID NOT WANT cmd to be extended, as currently it is the only stream free interface available, a much necessary tool. If anyone uses somehting other than IE they don't get this functionality either; uh-oh, all alternate browsers are "exploiting" windows! quick tell the press.

As for other SP2 complaints, there were many floating around. Amusingly quashed by postings such as "350 installs perfectly performed this morning". Ah the joys of sensationalism.

A good article pointing out some real home truths.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/265/28370#28370