Explore Security hole

[Sexzity]

In the Danish news, they just told that Microsoft have work the 24 hours the last 14 days to close a security hole in explore.
It seems like Microsoft can't close the hole!!!!!!
The security hole is so big that a hacker can download your harddisk, without you can see it.
Microsoft expect that the first virus will be around in a coulple of days.
Maby it is soon time to find the link to Netscape again.

[darksoul]

geesh
I locked my harddisk with steel,
do you think they can still download it ?

[loverboy]

any1 have news links to this report?

[Luc]

Originally posted by loverboy
any1 have news links to this report?

www.bullshit.com

[Triple 6]

Originally posted by Luc


www.bullshit.com

[EZRhino]

All I can say is fire wall, fire wall, fire wall.

[extreme]

Originally posted by EZRhino
All I can say is fire wall, fire wall, fire wall.

.. good luck protecting yourself against client browser vulns with a firewall ;].

[skillfull]

Originally posted by extreme


.. good luck protecting yourself against client browser vulns with a firewall ;].

people feel so safe with a windows firewall, soryy but...
hahahahahahahah
ahahahahahahaha
ahahahahahahahaha

[GrimShawn]

glory hole?

[Sexzity]

http://news.com.com/2100-7349_3-5083234.html

[JamesK]

[Sexzity]

Microsoft just made the update.

From microsoft:
A number of security issues have been identified in Microsoft® Internet Explorer that could allow an attacker to compromise a Microsoft Windows®-based system and then take a variety of actions. For example, an attacker could run programs on your computer when you are viewing a Web page. This vulnerability affects all computers that have Internet Explorer installed. (You do not have to be using Internet Explorer as your Web browser to be affected by this issue.) You should help protect your computer by installing this update from Microsoft.

So it mith such this threat, but this hole is BIG!

[goBigtime]

This was talked about on GFY in about 20 threads (complete with fixes) about 2 weeks ago, and probably 2 months before that.


open regedit

go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\ Content Type\

and then about 4 entries down inside the content type "folder" will be a folder that sais:

application/hta


Just rename that folder to:

application/htalkejrwlrkjwelrkj
......................^ put your own jibberish here.

Close it & you're done.

----------------

Then to close the other hole:

go to START button and run: dcomcnfg

If you're in windows 2000 or XP the menus are a bit different.

In XP... open Component Services, wait a few seconds and get it to display the "Computers" folder.

Expand that and you will see "My Computer" or whatever your computer is... right click on that and select properties.

Go to Default properties tab and disable DCOM.

(In Windows 2000 I think you can get
to the default properties tab right away.)

[goBigtime]

Originally posted by skillfull


people feel so safe with a windows firewall, soryy but...
hahahahahahahah
ahahahahahahaha
ahahahahahahahaha

How safe are they with a hardware firewall + software firewall + mozilla firebird browsers (kicks ass) + mozilla thunderbird (better than outlook?) & DCOM disabled