Shouldn't using Windows to run anything other than games constitute culpable negligence? It is quite obvious that Windows security is fundamentally broken and that Microsoft is incapable of fixing it. So using Windows to store or process any kind of sensitive information (banking, medical or whatever) is knowingly irresponsible and negligent.


http://news.bbc.co.uk/1/hi/business/3477899.stm



"Microsoft 'critical' flaw warning


Microsoft has warned that a "critical" flaw in the latest versions of its Windows operating system could leave computers vulnerable to hackers.

The flaw affects systems running Windows NT, Windows 2000, Windows XP or Windows Server 2003 software.

It has urged all home users and firms to download a software repairing patch free from its website to fix it.

The flaw was found by a net security firm in July 2003. Microsoft announced it in its monthly security bulletin.

'Extremely deep problem'

Experts have warned that if home users and companies with these operating systems do not download the fix, hackers could, in theory, break into computers and take files, delete or steal valuable data, or snoop on what that user is doing.

It could also leave systems open to worm and virus threats.

"It does affect all [current] versions of Windows," said Stephen Toulouse, security program manager for Microsoft's Security Response Center.

He added the problem was "an extremely deep and pervasive technology in Windows" which affects the language standard that computers use to communicate with each other.

Marc Maiffret of US company eEye Digital Security, who informed Microsoft of the vulnerability over six months ago, has criticised Microsoft for taking so long to come up with a patch to fix it.

"This is one of the most serious Microsoft vulnerabilities ever released," said Mr Maiffret.

"The breadth of systems affected is probably the largest ever." He added that, unusually, even the most secure Windows networks would be vulnerable."


-- William T Goodall Mail : [EMAIL PROTECTED] Web : http://www.wtgab.demon.co.uk Blog : http://radio.weblogs.com/0111221/

"Our products just aren't engineered for security." - Brian Valentine, senior vice president in charge of Microsoft's Windows development team.

_______________________________________________
http://www.mccmedia.com/mailman/listinfo/brin-l

Reply via email to