full-disclosure - Microsoft update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20051210125919.GA32196@uran.tmux.lan>
Date: Sat Dec 10 12:59:29 2005
From: tobiasu at tmux.org (Tobias Ulmer)
Subject: Microsoft update

Hi all,

I just installed a fresh copy of M$ XP Pro + SP2 german and did a 
Windows Update.

We all know that M$ takes security seriously, but I'm a bit paranoid if 
it comes to this company. So I took a closer look at the active x 
component they wanted to install.

http://www.tmux.org/pictures/ms_update_startmenu.jpg (start -> windows 
update)

However, going to Windows Update from the microsoft.de homepage, I got 
this:

http://www.tmux.org/pictures/ms_update_via_ms.de.jpg

Windows says both certificates are valid...

Tobias