full-disclosure - Microsoft Windows XP SP2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: mvp at joeware.net (joe)
Subject: Microsoft Windows XP SP2

I believe the $300 million figure being quoted has the "marketing" of SP2 in
there. They want to get the word out globally to get patched and are
supposed to do a lot to help out the folks in areas that can't get it off
the NET. Also I believe they are supposed to pull the current retail boxed
copies of XPs in stores and replace with XP2 versions. Also many security
pros have petitioned Microsoft to release SP2 CDs like AOL CDs - have them
for free in computer stores and magazines, etc. Whether that will happen or
not remains to be seen. But MS is pretty adamant about trying to get as many
machines patched as possible. 

  joe

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of
http-equiv@...ite.com
Sent: Thursday, August 19, 2004 11:35 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Microsoft Windows XP SP2

Let's commence by giving credit where credit is due. The thinking is that
the manufacturer of Windows XP has done a splendid job in patching their
little operating system with 300 million dollar's worth of fixes. This is
not exactly 'pocket change'.

But this is:

1. trivial scripting in the local zone
2. notepad icon regardless of file in XP's little zip thing

http://www.malware.com/malware.sp2.zip

many other 'bits and pieces' to be had but overall a splendid effort on the
manufacturer's part [for now]. Not quite sure where all that money went
though.

End Call

--
http://www.malware.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html