full-disclosure - 70 million computers are using Windows 98rightnow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon Jul 17 01:16:03 2006
From: umphress at gmail.com (Chris Umphress)
Subject: 70 million computers are using Windows
	98rightnow

> isnt browsing the web to sites with flash, java, asp, php, etc,
> allowing an untrusted user to run code on your machine?

Yes. Sometimes. No. No. Etc.

ASP, PHP, and some Java applications are run on the server. They send
your client HTML, javascript, css, etc. Now Java APPLETS are run on
your computer -- if you allow them.

> I think so given the rate at which exploits are released for all the
> above protocols, and especially considering the fact they will all go
> unpatched from now on.
>
> Forgive me if this is a stupid question, but doesnt win9x have file
> shares? Does that require authentication?

Yes. It can.

> -JP<who has never used win9x>

-- 
Chris Umphress <http://daga.dyndns.org/>