Archive for June, 2012


this is inside a component that is on nearly every Microsoft machine worldwide.  this includes all versions of xp, vista, 7 and the server versions.  There is no Windows Update yet.  Please use the fixit for me link for a hotfix.  This is a patch for this issue but it may cause issues since it’s not been fully validated.  However this problem allows remote system takeover via IE AND Office.

The link to the fixit is here. 

 

Microsoft Security Advisory: Vulnerability in Microsoft XML Core Services could allow remote code execution.

Apple is even more controlling than Microsoft.  Once you step into the Iworld you can’t get your stuff out without major gyrations.  In this environment Apple can do whatever it wants whenever it wants.  What’s funny is people are making a ton of noise but I bet it’s only noise…they’ll continue to buy the Istuff even though it costs them inflated prices.  Once folks take their noise and put action behind it(like not buying Istuff) Apple will either change it’s ways or go bankrupt.

 

Apple charges firms to create accessories as part of its ‘made for iPhone’ scheme which approves add-ons, although the firm has never revealed how much it charges to join the scheme.

Manufacturers must also buy a special ‘authentication chip’ for some of their accessories, a move by Apple to cut down on unapproved accessories, and it is believed the chip is even found in some iPhone headphones.

‘It will be nearly impossible to make unlicensed devices,’ said Mr Scoble. ‘Unfortunately these design goals mean making obsolete the something like 10 power chargers in my home. Sigh.’

Sirio Brozzi of the website Awesome Robo hit out at the move, and blogged: ‘People are stunned by this possibility, myself included. I mean, why fix something that’s not broken?’

Mr Brozzi believes the move is planned to give both Apple and accessory makers a huge new market.’

Have you guys ever heard of “planned obsolescence”?’ he added. ‘It’s a practice which encourages planning and designing a product so it’s only useful for a limited time, before becoming obsolete.’

via iPhone 5: Apple’s ‘rip-off’ plan to make accessories obsolete by changing design of socket | Mail Online.

Just read the below paragraph.  Keep in mind what this means..it means that malware and all of the associated security problems are now fully available throughout everything..tablets, phones, desktops..etc etc etc.  Not a good thing.

 

At Microsofts Windows Phone Summit in San Francisco this morning, Redmond officially announced Windows Phone 8. The company confirmed what weve suspected for many months now: Windows Phone 8 will be built around the same core components as Windows 8.The current Windows Phone 7.5 operating system is built on Microsofts Windows CE platform, designed for embedded systems with tight memory constraints and slow processors. Windows Phone 8 will instead be built on the Windows NT platform, and in so doing will inherit its much richer feature set: support for multicore processors, robust file systems, extensive device driver support, a capable multimedia framework, and more.

via Windows NT coming to phones with Windows Phone 8 | Ars Technica.

This thing is quite huge..and fascinating.  It’s amazing how many folks are acting surprised at how this thing evaded all current security current a/v.  i am constantly wiping machines with malware that has gone around any a/v.  this is not news.  Also the main downloaded module that really gets this thing moving uses….wait for it…..ActiveX.  yes that wonderful thing Microsoft did saying..we are going to run internet based code as SYSTEM at ring 1 or zero.  Eventually ActiveX has to die.  Flame is fascinating is what it does and the fact is comes with SqlLite to generate a database of everything it collects..which is highly extensive.  Read the linked wikipedia article about what all this thing can do.  Also read this pdf from time to time because pdf document is being updated regularly.  If you are unlucky enough to have this on your systems you can be certain your entire network and everything you have on said network is now owned by somebody else.