full-disclosure - WinXP SP2 comments (was: Internet explorer 6 execution of arbitrary code)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040607063923.XSAW6802.imf19aec.mail.bellsouth.net@maudib>
From: scottp at dreamwright.com (Scott Phelps)
Subject: WinXP SP2 comments  (was: Internet explorer 6 execution of arbitrary code)

I would really watch out if trying an uninstall of SP2.

My understanding is that the size of it (something like 270 M) is because
you get a lot of recompiled binaries adding buffer overflow protection. It
wouldn't surprise me if a few things are left behind after an uninstall.

Scott P

"They that can give up essential liberty to obtain a little temporary safety
deserve neither liberty nor safety"
Benjamin Franklin, 1759

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Poof
Sent: Monday, June 07, 2004 1:12 AM
To: 'Chris Carlson'; 'Jelmer'
Cc: full-disclosure@...ts.netsys.com
Subject: RE: [Full-Disclosure] WinXP SP2 comments (was: Internet explorer 6
execution of arbitrary code)

> While the new "security center" complains about how I don't have a
> firewall or antivirus installed (it doesn't detect either), the better
> security more than makes up for this minor annoyance - I no longer need to
> worry about where I go because the simple yet absolute 'no popups' and 'no
> software installations' security settings lock IE down so well.

Well, the "Security Center" will only detect your firewall/antivirus if the
program tells Windows that it's protecting your computer. (New API Microsoft
did... Many companies are using it now.)

> A note about the security center- I *think* it can be disabled by editing
> the %systemroot%\inf\sysoc.inf file to show the entry for it in add/remove
> windows components.  I've tried to do this, but it either does not have
> immediate results, or does not work.  I havn't done any real research on
> it because of a lack of time (or perhaps patience), but would like to know
> how to get rid of this if anyone knows.

Well, all you have to do to disable it... Is disable the "Security Center"
service in the services.msc! Gasp! Easy. =)

BTW. Uninstalling a service pack isn't 100% supported. It's recommended to
wipe and reinstall.

~