951748 Fixes What? s

I've read the messages and the links and the security bulletin, and still cannot figure out what KB951748 is supposed to fix.
Something about DNS. I've got comcast cable, so do I have DNS? Could somebody explain in plain English what KB951748 is
about, so I can decide whether to do without it, or do with ZA?

Also, the other free firewalls -- which ones let you control outbound traffic? That's what I really like about ZA.


Lady Dungeness
Out of Danger until September
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

A1. Support for Windows Update: http://support.microsoft.com/gp/wusupport

A2. See related conversations in this forum:
http://forum.zonelabs.org/zonelabs/board?board.id=cfg

Keep an eye on this thread:
http://forum.zonelabs.org/zonelabs/b...ssage.id=52785

Although the fix here should work:
http://forum.zonelabs.org/zonelabs/b...ssage.id=52727

I strongly disagree with this advice:
http://download.zonealarm.com/bin/fr...cessIssue.html

A3. Perhaps a better firewall is what's needed? =>
http://www.matousec.com/projects/fir...ge/results.php
--
~PAÞ


wrote:
> I've read the messages and the links and the security bulletin, and still
> cannot figure out what KB951748 is supposed to fix. Something about DNS.
> I've got comcast cable, so do I have DNS? Could somebody explain in plain
> English what KB951748 is about, so I can decide whether to do without it,
> or do with ZA?
>
> Also, the other free firewalls -- which ones let you control outbound
> traffic? That's what I really like about ZA.

Hi Lady -

DNS = Domain Name Server

It refers to internet addresses (aka "URLs") by name like, microsoft.com,
yahoo.com, google.com and whatever else dot com, dot org, dot net etc.

One big concern is that a DNS name can be "hijacked". For example, if you go
to "YourBank dot com" you could end up at a phony version of it, called a
"phish site". The phish site "fishes" for you to enter your personal bank
login info, e.g. name and password, then it uses that info to gain access to
your bank acct & other personal info.

That's just one reason for this update. If you're on the internet using
Comcast, it's really more a Comcast problem because it uses a server, hosting
it's own sites.

However, your PC can also be hijacked and used as a "server" by all sorts of
nasty bugs concocted by even nastier people. Your PC has an address even
though it's not a server that hosts websites. So, in that sense I'd call it a
"virtual DNS". (I don't know if that makes sense or not, lol.)

Your PC not only takes in info (webpages, IMs, email), but it also obviously
semds out info. This update should make it more difficult for hackers to use
your PC for unauthorized outgoing purposes.

You can check out all the tech stuff in the message posted above, but most
of it is tedious reading at best and not very user-friendly.

I can't tell you what to do, but right now I'm following the advice posted
at ZoneAlarm. I unstalled the update, keep ZoneAlarm set to "High" security
and will just wait for MS and/or ZA to get the bugs worked out.

Here's the recommendations at ZoneAlarm:

"ZoneAlarm is investigating the issue with Microsoft update KB951748"

http://forum.zonelabs.org/zonelabs/b...ssage.id=52860

I don't know if any of this is of help, but I expect it'll be resolved
before too long - there's a lotta POed users who didn't expect the update to
act up so radically. I imagine there are still loads more average home users
who haven't figured out what's going on and who can't access the internet to
find out! A real catch-22.

Hmmm....if this is of any assistance does that mean that I do or I don't get
whipped?

Best wishes.
==================



"" wrote:

> I've read the messages and the links and the security bulletin, and still cannot figure out what KB951748 is supposed to fix.
> Something about DNS. I've got comcast cable, so do I have DNS? Could somebody explain in plain English what KB951748 is
> about, so I can decide whether to do without it, or do with ZA?
>
> Also, the other free firewalls -- which ones let you control outbound traffic? That's what I really like about ZA.
>
>
> Lady Dungeness
> Out of Danger until September
> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
>

I forgot this part:

"Also, the other free firewalls -- which ones let you control outbound
traffic? That's what I really like about ZA. - ""
wrote"
===============================
Yes, and ZA "learns" really well, too, in addition to keeping a good eye on
what's trying to access the internet.

If this issue isn't resolved, you could check out Comodo, it's a freebie.
Haven't tried it myself but it's supposed to be good from what I hear.

http://www.personalfirewall.comodo.c...ex-hireit.html

Roger Overunder wrote:
> Hi Lady -
>
> DNS = Domain Name Server
>
> It refers to internet addresses (aka "URLs") by name like, microsoft.com,
> yahoo.com, google.com and whatever else dot com, dot org, dot net etc.
>
> One big concern is that a DNS name can be "hijacked". For example, if you go
> to "YourBank dot com" you could end up at a phony version of it, called a
> "phish site". The phish site "fishes" for you to enter your personal bank
> login info, e.g. name and password, then it uses that info to gain access to
> your bank acct & other personal info.
>
> That's just one reason for this update. If you're on the internet using
> Comcast, it's really more a Comcast problem because it uses a server, hosting
> it's own sites.
>
> However, your PC can also be hijacked and used as a "server" by all sorts of
> nasty bugs concocted by even nastier people. Your PC has an address even
> though it's not a server that hosts websites. So, in that sense I'd call it a
> "virtual DNS". (I don't know if that makes sense or not, lol.)
>
> Your PC not only takes in info (webpages, IMs, email), but it also obviously
> semds out info. This update should make it more difficult for hackers to use
> your PC for unauthorized outgoing purposes.
>
> You can check out all the tech stuff in the message posted above, but most
> of it is tedious reading at best and not very user-friendly.
>
> I can't tell you what to do, but right now I'm following the advice posted
> at ZoneAlarm. I unstalled the update, keep ZoneAlarm set to "High" security
> and will just wait for MS and/or ZA to get the bugs worked out.
>
> Here's the recommendations at ZoneAlarm:
>
> "ZoneAlarm is investigating the issue with Microsoft update KB951748"
>
> http://forum.zonelabs.org/zonelabs/b...ssage.id=52860
>
> I don't know if any of this is of help, but I expect it'll be resolved
> before too long - there's a lotta POed users who didn't expect the update to
> act up so radically. I imagine there are still loads more average home users
> who haven't figured out what's going on and who can't access the internet to
> find out! A real catch-22.
>
> Hmmm....if this is of any assistance does that mean that I do or I don't get
> whipped?
>
> Best wishes.
> ==================
>
>
>
> "" wrote:
>
>> I've read the messages and the links and the security bulletin, and still cannot figure out what KB951748 is supposed to fix.
>> Something about DNS. I've got comcast cable, so do I have DNS? Could somebody explain in plain English what KB951748 is
>> about, so I can decide whether to do without it, or do with ZA?
>>
>> Also, the other free firewalls -- which ones let you control outbound traffic? That's what I really like about ZA.
>>
>>
>> Lady Dungeness
>> Out of Danger until September
>> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
>>
I'll bet there are folks who will wonder, hopefully they will have a
guru to help resolve.

--

Rick
Fargo, ND
N 46°53'251"
W 096°48'279"

Remember the USS Liberty
http://www.ussliberty.org/

PS: The vulnerability addressed by KB951748 *is* a big deal! See
http://blog.washingtonpost.com/secur...et_tues_1.html


PA Bear [MS MVP] wrote:
> A1. Support for Windows Update: http://support.microsoft.com/gp/wusupport
>
> A2. See related conversations in this forum:
> http://forum.zonelabs.org/zonelabs/board?board.id=cfg
>
> Keep an eye on this thread:
> http://forum.zonelabs.org/zonelabs/b...ssage.id=52785
>
> Although the fix here should work:
> http://forum.zonelabs.org/zonelabs/b...ssage.id=52727
>
> I strongly disagree with this advice:
> http://download.zonealarm.com/bin/fr...cessIssue.html
>
> A3. Perhaps a better firewall is what's needed? =>
> http://www.matousec.com/projects/fir...ge/results.php
>
> wrote:
>> I've read the messages and the links and the security bulletin, and still
>> cannot figure out what KB951748 is supposed to fix. Something about DNS.
>> I've got comcast cable, so do I have DNS? Could somebody explain in
>> plain
>> English what KB951748 is about, so I can decide whether to do without it,
>> or do with ZA?
>>
>> Also, the other free firewalls -- which ones let you control outbound
>> traffic? That's what I really like about ZA.

Thanks so much for the explanation! It makes great sense. IIRC, Sp3 and ZA don't play well together, either.

You know, over the years, there have been about 4 times that my computer got messed up because of an update. It's hell on
the ordinary home user. That's what got me to find the groups and learn a little, bit by bit. But yes, I agree that MS
should check its patches to make sure they play nicely with other common software. IMHO, it's negligent of them to not do
so.


Lady Dungeness
Out of Danger until September
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~



On Wed, 9 Jul 2008 14:23:01 -0700, Roger Overunder <> wrote:

>I forgot this part:
>
>"Also, the other free firewalls -- which ones let you control outbound
>traffic? That's what I really like about ZA. - ""
>wrote"
>===============================
>Yes, and ZA "learns" really well, too, in addition to keeping a good eye on
>what's trying to access the internet.
>
>If this issue isn't resolved, you could check out Comodo, it's a freebie.
>Haven't tried it myself but it's supposed to be good from what I hear.
>
>http://www.personalfirewall.comodo.c...ex-hireit.html

With all the possible permutations of software and hardware do you
really think it is possible for MS to test *all of them* ?
Don't you think that the vendors *should* be sent test updates to see if
their software/hardware is affected by said test updates ?
Sorry LadyDungeness, the only software that was affected by this
critically important update is ZoneAlarm.
Does that tell you anything ?
Please read this comparative tests of firewalls and decide for yourself
if ZA is the product that should be protecting your system:

http://www.matousec.com/projects/firewall-challenge/

And, I'll bet dollars to donuts that the 4 times your computer 'got
messed up because of an update' were directly attributable to ZA being
installed.
Get the picture yet ? There are *other* firewalls available that do
protect the system while not causing updating issues or update related
issues.
The choice is yours but the blame does not go to MS, this time. <w>

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


wrote:

> Thanks so much for the explanation! It makes great sense. IIRC, Sp3 and ZA don't play well together, either.
>
> You know, over the years, there have been about 4 times that my computer got messed up because of an update. It's hell on
> the ordinary home user. That's what got me to find the groups and learn a little, bit by bit. But yes, I agree that MS
> should check its patches to make sure they play nicely with other common software. IMHO, it's negligent of them to not do
> so.
>
>
> Lady Dungeness
> Out of Danger until September
> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
>
>
>
> On Wed, 9 Jul 2008 14:23:01 -0700, Roger Overunder <> wrote:
>
>
>>I forgot this part:
>>
>>"Also, the other free firewalls -- which ones let you control outbound
>>traffic? That's what I really like about ZA. - ""
>>wrote"
>>===============================
>>Yes, and ZA "learns" really well, too, in addition to keeping a good eye on
>>what's trying to access the internet.
>>
>>If this issue isn't resolved, you could check out Comodo, it's a freebie.
>>Haven't tried it myself but it's supposed to be good from what I hear.
>>
>>http://www.personalfirewall.comodo.c...ex-hireit.html

wrote:

> Also, the other free firewalls -- which ones let you control outbound traffic? That's what I really like about ZA.

It's worth keeping in mind that no software firewall can actually control
outbound traffic. If malware is running it will always be able to bypass a
software firewall - although admittedly not all malware authors bother to do so.

Harry.

Mr. Green postulated:

>And, I'll bet dollars to donuts that the 4 times your computer 'got
>messed up because of an update' were directly attributable to ZA being
>installed.


Sorry. ZA had nothing to do with the corruptions. Although ZA HAS interfered with installs before. The previous crashes
were from bad updates.

I like ZA because it lets me filter outbound traffic. There are a few programs that I do not want to have them send out
information. Plus, I like to be aware when I'm working in an application that has the ability to trade information online.
Occasionally I allow Word or Excel to connect. Generally, only my internet-specific applications have permission. It's just
a security precaution.


>Get the picture yet ?

I didn't mean to upset you. Are you ok now?


>MowGreen [MVP 2003-2008]
>===============
> *-343-* FDNY
>Never Forgotten
>===============
>
>
> wrote:
>
>> Thanks so much for the explanation! It makes great sense. IIRC, Sp3 and ZA don't play well together, either.
>>
>> You know, over the years, there have been about 4 times that my computer got messed up because of an update. It's hell on
>> the ordinary home user. That's what got me to find the groups and learn a little, bit by bit. But yes, I agree that MS
>> should check its patches to make sure they play nicely with other common software. IMHO, it's negligent of them to not do
>> so.
>>
>>
>> Lady Dungeness
>> Out of Danger until September
>> ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
>>
>>
>>
>> On Wed, 9 Jul 2008 14:23:01 -0700, Roger Overunder <> wrote:
>>
>>
>>>I forgot this part:
>>>
>>>"Also, the other free firewalls -- which ones let you control outbound
>>>traffic? That's what I really like about ZA. - ""
>>>wrote"
>>>===============================
>>>Yes, and ZA "learns" really well, too, in addition to keeping a good eye on
>>>what's trying to access the internet.
>>>
>>>If this issue isn't resolved, you could check out Comodo, it's a freebie.
>>>Haven't tried it myself but it's supposed to be good from what I hear.
>>>
>>>http://www.personalfirewall.comodo.c...ex-hireit.html

Lady Dungeness
Out of Danger until September
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~