Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Vista General Discussion > Interesting but sad - OT

Reply
Thread Tools Display Modes

Interesting but sad - OT

 
 
Richard Urban
Guest
Posts: n/a

 
      06-09-2009
100,000 web sites were destroyed!
http://www.theregister.co.uk/2009/06/08/webhost_attack/

Guess what operating system HyperVM runs on?

Are you getting this Alias?


--

Richard Urban
Microsoft MVP
Windows Desktop Experience


 
Reply With Quote
 
 
 
 
Richard Urban
Guest
Posts: n/a

 
      06-09-2009
From what I have read elsewhere there are no backups. The information is
gone!

When a person obtains root access on a Linux computer they can do whatever
they want. In this case they deleted the information.

--

Richard Urban
Microsoft MVP
Windows Desktop Experience


"Dalo Harkin" <> wrote in message
news...
>
> That'll take some time to recover
>
>
> --
> Dalo Harkin
> Posted via http://www.computerhelpforums.net
>


 
Reply With Quote
 
Alias
Guest
Posts: n/a

 
      06-09-2009
Richard Urban wrote:
> 100,000 web sites were destroyed!
> http://www.theregister.co.uk/2009/06/08/webhost_attack/
>
> Guess what operating system HyperVM runs on?


It ain't Ubuntu and which OS it's running on means nothing.

>
> Are you getting this Alias?


A weakness in a *program* is not a weakness in Linux.

Alias
>
>


 
Reply With Quote
 
Alias
Guest
Posts: n/a

 
      06-09-2009
Richard Urban wrote:
> From what I have read elsewhere there are no backups. The information
> is gone!
>
> When a person obtains root access on a Linux computer they can do
> whatever they want. In this case they deleted the information.
>


Obtaining root access on *any* machine ... That said, obtaining root
access on Linux is much more difficult than Windows.

Alias
 
Reply With Quote
 
Mark Levitski
Guest
Posts: n/a

 
      06-09-2009
that proves that Search, filecopy of numerous & large files, customization,
etc can be inferior in Vista versus WinXP just because it's securer.

Fix one issue that plagued Windows since 95 thru XP, but open a hos tof
others. This is not a justification.
Vista is securer, OK, fine.

Doesn't mean I will praise its deficciencies versus XP.
It's like saying America is the best country on Earth.
Yes we can buy material goods at higher volumes/capita than in other
countries. But our housing, healthcare/social protections, and racial
tensions are serious problems
SO by being the "best country on Earth" doesn't mean we shoudl relax and
praise it endlessly.

Same with Vista, I know it's secure. Just by the fact I can't accomplish
tasks effciently until disabling UAC, etc annboyances else it was asking me
if I want to move a mouse and whether it's safe to move a mouse or breath a
little air on the screen, I need a permit to shut down, etc nonsense. I
know this "nonsense" was with good intentions to secure the syste, except
that I am alone using it so I ha dto relax security, and maintain a remote
backup in case of an attack.

It's just tha tother issues now appearaed, solved security, added other
propblems.

 
Reply With Quote
 
+Bob+
Guest
Posts: n/a

 
      06-09-2009
On Tue, 9 Jun 2009 04:36:35 -0400, "Richard Urban"
<> wrote:

>From what I have read elsewhere there are no backups. The information is
>gone!


That would be an unrelated business issue with a hosting provider.

>When a person obtains root access on a Linux computer they can do whatever
>they want. In this case they deleted the information.


Something is missing from that story. SQL injection does not give you
root access. You can do lots of nasty things to data with SQL
injection but getting beyond the d/b environment would be unusual.

Regardless, this is a supplemental software specific attack. It has
nothing to do with desktop Linux. And, this still isn't as bad as
when it was discovered that Win 2000 / IIS server allowed unrestricted
access to any program on the root/C: drive simply by calling with http
to the server with a cgi command and a path that worked it's way up
with a couple "../" incorporations.

That bug was the result of MS ignoring the most basic rule of web
server design: an application running on the server should never be
able to access anything above the root of the server. It was there
because MS's basic security architecture is flawed and their solution
to "application integration" in their flawed environment was to allow
any web server application to access anything, anywhere, on the
server.

No OS is perfect; Linux on web servers is not perfect; MS on servers
is even worse.
 
Reply With Quote
 
Richard Urban
Guest
Posts: n/a

 
      06-09-2009
Supplement software attack or not, it is fun to tweak the noses of those
Linsux schmucks (Alias & others) who insist on posting here.

If Linsux was as strong and bullet proof as those people say (switch to
Linsux and you won't have any security problems) this could not happen. I'm
lovin it!

--

Richard Urban
Microsoft MVP
Windows Desktop Experience


"+Bob+" <> wrote in message
news:...
> On Tue, 9 Jun 2009 04:36:35 -0400, "Richard Urban"
> <> wrote:
>
>>From what I have read elsewhere there are no backups. The information is
>>gone!

>
> That would be an unrelated business issue with a hosting provider.
>
>>When a person obtains root access on a Linux computer they can do whatever
>>they want. In this case they deleted the information.

>
> Something is missing from that story. SQL injection does not give you
> root access. You can do lots of nasty things to data with SQL
> injection but getting beyond the d/b environment would be unusual.
>
> Regardless, this is a supplemental software specific attack. It has
> nothing to do with desktop Linux. And, this still isn't as bad as
> when it was discovered that Win 2000 / IIS server allowed unrestricted
> access to any program on the root/C: drive simply by calling with http
> to the server with a cgi command and a path that worked it's way up
> with a couple "../" incorporations.
>
> That bug was the result of MS ignoring the most basic rule of web
> server design: an application running on the server should never be
> able to access anything above the root of the server. It was there
> because MS's basic security architecture is flawed and their solution
> to "application integration" in their flawed environment was to allow
> any web server application to access anything, anywhere, on the
> server.
>
> No OS is perfect; Linux on web servers is not perfect; MS on servers
> is even worse.


 
Reply With Quote
 
+Bob+
Guest
Posts: n/a

 
      06-09-2009
On Tue, 9 Jun 2009 15:30:09 -0400, "Richard Urban"
<> wrote:

>Supplement software attack or not, it is fun to tweak the noses of those
>Linsux schmucks (Alias & others) who insist on posting here.
>
>If Linsux was as strong and bullet proof as those people say (switch to
>Linsux and you won't have any security problems) this could not happen. I'm
>lovin it!
>



No OS is invulnerable to attack. Some are just more open than others.
What bothers me about MS is that they are still refusing to
acknowledge their underlying structural problems and instead give us
band-aids like UAC. The issue for them is that real change would
impact their business model and that's out of the question for them.
It's business before security, profit before customers.

 
Reply With Quote
 
Richard Urban
Guest
Posts: n/a

 
      06-09-2009
No one is going to gain the equivalent of root privileges from the internet
when you are using Vista or Windows 7 with UAC enabled. Yet apparently it is
easy to do in Linsux.

--

Richard Urban
Microsoft MVP
Windows Desktop Experience


"+Bob+" <> wrote in message
news:...
> On Tue, 9 Jun 2009 15:30:09 -0400, "Richard Urban"
> <> wrote:
>
>>Supplement software attack or not, it is fun to tweak the noses of those
>>Linsux schmucks (Alias & others) who insist on posting here.
>>
>>If Linsux was as strong and bullet proof as those people say (switch to
>>Linsux and you won't have any security problems) this could not happen.
>>I'm
>>lovin it!
>>

>
>
> No OS is invulnerable to attack. Some are just more open than others.
> What bothers me about MS is that they are still refusing to
> acknowledge their underlying structural problems and instead give us
> band-aids like UAC. The issue for them is that real change would
> impact their business model and that's out of the question for them.
> It's business before security, profit before customers.
>


 
Reply With Quote
 
Alias
Guest
Posts: n/a

 
      06-09-2009
Richard Urban wrote:
> No one is going to gain the equivalent of root privileges from the
> internet when you are using Vista or Windows 7 with UAC enabled.


No need. There are at least 50,000 users A DAY who are allowing
Conficker to infect their Windows computers.

> Yet
> apparently it is easy to do in Linsux.


Not nearly as easy as it is with Windows.

Alias
>

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
This is very interesting brummyfan Windows Vista General Discussion 21 10-06-2008 09:38 PM
An interesting PS3/MM6 quirk PapaJohn Windows Vista Music, Pictures and Video 5 07-15-2008 11:04 AM
This is interesting Mike Windows Vista Performance 7 04-12-2008 03:29 PM
interesting Will Windows Vista General Discussion 2 10-07-2006 10:16 AM
Here's an interesting article Will Schuitman Windows Vista General Discussion 1 09-01-2006 10:05 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59