Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Feast of Egos
Tim Mullen, 2004-09-07

Eager to tarnish Microsoft's shiny new Service Pack 2, the security press managed to spin the most thin and marginal issues into "gaping holes" and "security craters."

Comments Mode:
Feast of Egos 2004-09-07
Beryllium Sphere LLC (1 replies)
Feast of Egos 2004-09-13
Anonymous
Feast of Egos 2004-09-08
Todd Knarr (2 replies)
Feast of Egos 2004-09-09
Troll (2 replies)
Feast of Egos 2004-09-10
Todd Knarr (2 replies)
Feast of Egos 2004-09-13
Anonymous
Feast of Egos 2004-09-14
Angus (1 replies)
Feast of Egos 2004-09-16
Anonymous
Feast of Egos 2004-09-13
Ed
Feast of Egos 2004-09-14
Anonymous
Feast of Egos 2004-09-08
Anonymous
Feast of Egos 2004-09-08
Mat, CISSP
Feast of Egos 2004-09-08
Anonymous (1 replies)
Feast of Egos 2004-09-08
Anonymous
Feast of Egos 2004-09-08
Problem Updates (1 replies)
Feast of Egos 2004-09-14
Anonymous
I Agree 2004-09-08
Lucas
Feast of Egos 2004-09-09
Some Hacker (3 replies)
I have used SP2 on Windows XP Professional since it was added to "Windows Update".

This service pack has not had a negative impact on a single application I have used so far.

As for all of the broken applications: If you want you're webserver to work, it is a good idea that you (just maybe) allow it in the firewall.

That being said, I am yet to see any positive impact of SP2 either. Adding BO protection to an operating system with serious design flaws (see process injection, api hooking, kernel rootkits, web browser integrated into the OS, etc) and what can only be described as limited-by-design user-auditing features, doesn't help too much.

Anti-virus software is irrelevant, as in this day in age hackers are known to have compilers.

Personal firewalls are irrelevant thanks to the wonders of desktop users wanting to use the Internet (see process injection... hi rattle).

"If your patch status/firewall config/AV software/security settings allow the code to get onto your box, then nothing matters after that."
-> I agree, all of the Windows XP users with "malware.exe" now in shell:startup should just admit defeat and allow the "enterprise" network to be compromised.

No media-hype in the world will make this service pack any more than it is -- not-a-big-deal.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/265/28386#28386
Feast of Egos 2004-09-14
Anonymous (1 replies)
Feast of Egos 2004-09-19
Anonymous
Feast of Egos 2004-09-14
Brutal Dictator
Feast of Egos 2004-09-14
Angus (1 replies)
Feast of Egos 2004-09-19
AWKz
SP2 = MS-hyped Snake Oil 2004-09-14
Matthew Murphy
Feast of Egos 2004-09-14
Anonymous
Feast of Egos 2004-09-17
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus