Posts Tagged ‘Mac’
Critical: Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution
Those of you who are my PC security (Introduction to PC Security) students don’t have to worry about this because in the first few lessons of the course you’ve disabled this!
However, many of you have not taken the course so I thought it was wise to post this.
Oh, and by the MAC users, this affects you too if you are using the Microsoft Remote Desktop Connection Client to connect a MAC to a windows PC.
According to Microsoft’s Security Bulletin: MS09-044:
This security update resolves two privately reported vulnerabilities in Microsoft Remote Desktop Connection. The vulnerabilities could allow remote code execution if an attacker successfully convinced a user of Terminal Services to connect to a malicious RDP server or if a user visits a specially crafted Web site that exploits this vulnerability. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
There is also known issues after installing this update, so you may want to check the bulletin for a list of those.
I’ve been teaching the Introduction to PC Security course for over 5 years and from day 1 I’ve had the students disable this service! I wonder what else you’re missing?
45 Fast Facts About Microsoft
I am always stunned that many people don’t know that Bill Gates was once a teen hacker. But in the slide show presented by Baseline titled: 45 Fast Facts About Microsoft, the background info on Gates is listed on slide #1.
Maybe that’s why we should have never trusted him? ![]()
And if you’ve never seen the police mug shot of the young Gates, slide #3 provides that also.
Slide #19 states:
In 2004, former Windows Guru Jim Allchin wrote, “We lost our way,” while developing what would eventually become Vista.
The next slide added:
Allchin also wrote: “I would buy a Mac today if I was not working at Microsoft.”
I hear that Allchin! I’m saving for a MAC but in the meantime, I’m moving to Linux!
Check out the entire slide show here: http://www.baselinemag.com/c/a/Intelligence/45-Fast-Facts-About-Microsoft-461779/?kc=BLBLBEMNL11172009STR6
Friday’s Quickies: Feb Friday the 13th
While others are bemoaning the fact that it’s Friday the 13th and are destined to fall victim to the evil of the day, I’ve always found this day to be my lucky day! (And no, I’m not a witch in the occult sense of the term. However, ask one of my ex’s and they may tell you what kind of witch I am! LAUGHING)
But my humor today is only an example of my joy for the news I found this morning! So much good news for me that I can hardly contain my excitement!
First, let me share my good news about Microsoft!
Microsoft has announced, according to an article on Information Week, that they are going to open a global chain of retail locations!
I know, you’re wondering why I’m thinking this is such good news, right?
Well, how many times have we been so frustrated with Microsoft and their products and can’t get any satisfaction? Their support is absolutely no help and screaming at the outsourced folks in India just doesn’t quite do it, does it?
But! Now we’ll have a place to go to physically and scream or protest outside of! Imagine the possibilities! Is that not the most awesome news you’ve heard this week?
According to the article:
“The purpose of opening these stores is to create deeper engagement with consumers and continue to learn firsthand about what they want and how they buy,” Microsoft said in a statement.
I’m sure there are many Microsoft users out there that feel the way I do and want to engage Microsoft to let them experience firsthand our frustration and rage! Don’t you agree?
What fun we will have!
My next wonderful news for the day? InfoWorld reports that Apple issues massive security update for Mac OS X.
So why am I overwhelmed with joy at this knowledge? I’m once again – vindicated!
In my previous posts regarding Apple Mac Arrogance or Pure Stupidity, with part 2 and part 3, I’ve criticized Mac users on their arrogance about their security. And of course, I’ve caught my share of Mac vengeance for saying so!
According to the article at InfoWorld:
Apple’s first bug update of the year patches 48 vulnerabilities in its OS, including a Safari bug that Apple had information about for more than seven month
and,
Apple today issued multiple updates for Mac OS X and Java that patched 55 bugs, including one for its Safari Web browser that prompted a security researcher to blast the company for a half-hearted approach to security.
As sad as it is to be correct about such a serious matter, it does feel quite good to know that I’m telling the truth in calling these security issues out into the open. I promise that I will only gloat for a little while today! (GRIN)
Another great discovery today is the information on the Conficker worm.
First of all, you might remember my prediction (mentioned repeatedly on this blog to the point of being annoying!) about the Worm or Weapon of Mass Destruction?
Well, InfoWorld has given some insight into this new worm that really makes me wonder about how right on I am!
First spotted in November, the worm had soon infected more computers than any worm in recent years. By some estimates it is now installed on more than 10 million PCs. But ever since its first appearance, it has been strangely quiet. Conficker infects PCs and spreads around networks, but it doesn’t do anything else. It could be used to launch a massive cyberattack, crippling virtually any server on the Internet, or it could be leased out to spammers in order to pump out billions upon billions of spam messages. Instead, it sits there, a massive engine of destruction waiting for someone to turn the key.
What the researchers found in this code is fascinating and too lengthy to get into here, but I suggest you read the full InfoWorld article if your interested: With Global Effort, a new type of worm is slowed.
I’m telling you, they are testing new methods!
The other great news is that Microsoft is really ticked about this worm because the group responsible gives Microsoft’s address in the code! How does it feel to be exploited and frustrated Microsoft? Welcome to your user’s experience!
Well, they are so ticked off that they’ve offered a bounty of $250,000 for the author(s) of the worm!
Maybe if you’d invest that money into making an honestly good software, maybe this crap would stop. Ya think? But no, you’ll never learn because you corporate ashwipes know what’s good for us. Never listen to the consumers, that’s your motto!
Wait! I don’t want to get in a bad mood! I’m happy today! It’s a good day for me!
So, I’ll refrain from giving any comments on my experience with Windows 7 until tomorrow to insure I stay in a good mood!
Happy Friday the 13 readers!










