full-disclosure - Massive denial-of-service attack from microsoft.com

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <00ef01c32498$b7a61650$550ffea9@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: Massive denial-of-service attack from microsoft.com

Hmm, this latest security update for Windows XP looks like a case of the
cure being worse than the disease......

Richard

http://news.yahoo.com/news?tmpl=story2&cid=528&u=/ap/20030527/ap_on_hi_t
e/microsoft_bug&printer=1

Microsoft Pulls XP Update Over Glitch 
By TED BRIDIS, AP Technology Writer 

WASHINGTON - Microsoft Corp. withdrew a security improvement for its
flagship Windows XP (news - web sites) software after it crippled
Internet connections for some of the 600,000 users who installed it. 

Microsoft officials said Tuesday the update - which had been available
as an option since Friday on its "Windows Update" Web site - apparently
was incompatible with popular security software from other companies,
such as Symantec Corp. 

Microsoft said Internet connections failed immediately for an
unspecified number of more than 600,000 computers using Windows XP who
downloaded and installed the update. Consumers could reconnect only by
removing the update, which promised to improve reliability for types of
secure Internet connections commonly used by corporations. 

....