bugtraq - Re: Microsoft DNS resolver: deliberately sabotagedhosts-file lookup

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 13 Apr 2006 19:59:21 +0100
From: "Dave Korn" <davek_throwaway@...mail.com>
To: full-disclosure@...ts.grok.org.uk
Cc: bugtraq@...urityfocus.com
Subject: Re: Microsoft DNS resolver: deliberately
	sabotagedhosts-file lookup

Brandon S. Allbery KF8NH wrote:
> On Apr 13, 2006, at 1:29 , Dave Korn wrote:
>
>>   Hey, guess what I just found out:  Microsoft have deliberately
>> sabotaged
>> their DNS client's hosts table lookup functionality.
>
> I thought this was part of avoiding malware attempts to block Windows
> Update.

  Perhaps so; do you have a reference?  I found

http://support.microsoft.com/?scid=kb;en-us;836941

which was last reviewed seven days ago, and contains advice about how to 
"Remove entries for Windows Update and Microsoft Update from the hosts 
file", and no slightest hint of any suggestion that these entries could not 
possibly make any difference even if they tried.

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today.... 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/