FBI, Pentagon Talk to MS about XP Hole

(eternal_software) writes: "The Associated Press is reporting that the FBI and Defense Department are talking to Microsoft about the serious flaws found in the XP operating system. As we all know, the most recent flaw allowed any XP machine to be hijacked simply by connecting it to the internet. The government is getting involved because of growing U.S. concerns about risks to the 'net as a whole." In fact, the FBI would like you to go a bit beyond the MS patch. davecl points out the updated page put out by the National Infrastructure Protection Center about this vulnerability as well.

XP patch is broken

[Anonymous Coward]

MS XP patch disabled network card on my computer!

I guess the computer is really safe now.

Microsoft's in trouble . . .

[Anonymous Coward]

. . . the only backdoors in Windows XP are supposed to be the ones negotiated in the antitrust "settlement."

~~~

Nonsense

[ackthpt]

This is the DoJ (FBI) we're talking about, they want to thank Bill personally for keeping them all busy and employed during these uncertain economic times. Also, I'm sure there's a card with a box of chocolates on the way to Redmond from McAfee.

"You guys promised us..."

[Jacco de Leeuw]

"... that this backdoor would not be found for at least 2 years after this Bin Laden thing blows over!!"

"Yeah, but those eEye guys didn't want to be on our Security-Through-Obscurity team! And we had all these great goodies for them!"

Re:Trust us!

[kresmoi]

Isn't this the point where the government should be stepping in to do somethi...oh wait. nevermind.

Re:did anybody notice this....

[Alien54]

"Microsoft explained that a new feature of Windows XP can automatically download the free fix, which takes several minutes, and prompt consumers to install it. "

Nevermind that such an exploit could also be used to do just the same thing and send people off to download a "patch" form a psuedo MS site.

Suddenly people are taking seriously the idea that MS can present a problem for national security, when this was dismissed as a trollish comment before.

The fantasy is the unlikely end result with Bill Gates and buddies being arrested for treason for the software. yes it is just a fantasy. ,p.But isn't Xmas the time of year for dreams? ;)

Re:Trust us!

[eggz128]

Why? Because otherwise, 90% of computers out there, run by the technologically clueless population will never get this patch applied.

Yes they will. Thats what the auto updater is for. It downloads the patch in background while the technologically clueless user is browsing, then prompts them to install it by asking them "We send you this update in order to have your advice".

You can guess what the standard response will be.

Reminds me of the Simpson's episode ....

[wift]

where Burns and Smithers goes through high security steel doors, scanning stations, gates and end up in the control room that has a old screen door to the outdoors in it allowing a stray dog in. Seems to me that sums up Microsoft's entire security structure.

bonus karma points to anyone who correctly identifies the show number.

"Oh for christ sake"- Montgomery Burns after discovering a stray dog in his XP like high security control room.

Re:Way to go FBI

[Anonymous Coward]

Why buy a CD? Using this bug, you can install Mandrake remotely to all Windows XP systems connected to the internet.

People won

[robinjo]

I think the full implications of what MS has allowed to happen is going to felt more and more as real users suddenly understand that MS basically does not care about its users.

Look at

If XP is most secure, imagine other Windows'!

[roman_mir]

``This is the first network-based, remote compromise that I'm aware of for Windows desktop systems,'' said Scott Culp, manager of Microsoft's security response center. ``Every Windows XP user needs to immediately take action.'' He called it a ``very serious vulnerability.''

``This is the most secure version of Windows we have ever released,'' said Culp, adding that complex software ``will always fall short of perfection.''

http://dailynews.yahoo.com/h/ap/20011220/tc/micr os oft_hackers_7.html

Re:If XP is most secure, imagine other Windows'!

[PMan88]

"This is the most secure version of Windows we have ever released"

that says a lot

Instructions for Fool Proof Protection

[Anonymous Coward]

For all of you running M$ Windoze, especially XP, here are the full instructions on how to secure the world from hackers.

1. Turn off your computer.
2. Do not turn it on again, unless you upgrade to a different operating system. (May I personally recommend Linux to you?)

This might cause some distress in your life, but isn't the security of America worth the small price of the learning curve of picking up a truly secure operating system? Remember, it's all for your nation.