Does Microsoft Show Hackers How To Attack?

Home
>
Personal Technology
>
Does Microsoft Show Hackers How To Attack?

Does Microsoft Show Hackers How To Attack?

After another security hole recently surfaced in Microsoft's Windows operating system, the software giant released a patch this past Friday to plug the possibly devastating "back door" which allows hackers to potentially seize control of any pc running Windows.

The latest threat, "Download.Ject," infiltrates computers after users surfing with Microsoft's "Internet Explorer" web browser visit websites infected with the virus.

This newest security patch covers Windows XP, 2000, and Windows Server 2003.

Several factors make this latest development more disturbing than past discoveries of security problems with Internet Explorer, currently the most dominant web browser on the market.

First, it demonstrates very clearly that criminals discovered they can use the power of viruses to very profitably steal important bank, personal, and credit data from people on a large scale.

Second, it took Microsoft what many would consider a very long time to come up with a patch for this problem.

Before a fix appeared, Microsoft told everyone who uses Internet Explorer to stick their finger in the dyke by putting their web browser security settings on high, rendering it impossible to view or use features on many websites and web-based services.

Third, expect this to happen again as new holes open in the future when Microsoft makes Windows more complicated, adds layers of code, and generally makes the operating system more complex.

This may sound like business as usual, however, I think this story actually points to a much deeper problem, one for which I'm not sure a simple solution exists.

Though free and reasonably reliable, many people do not automatically update their Windows operating system through the update service on Microsoft's website. (I won't even get into how many people don't operate up-to-date anti-virus protection.)

Whenever Microsoft publishes a security update, especially for a highly publicized and obviously widespread security breach, thousands of people will not immediately download the update.

In fact, tens-of-thousands of users will not download these security updates for days, weeks, even months (if ever).

So let me ask what seems like a very elementary question: By publishing security updates that point out very obvious flaws in their system, doesn't Microsoft also point the way to exactly where the holes exist?

Let me put it another way.

Doesn't this rate the same as discovering that the local bank vault won't lock and then announcing the details on the front page of the paper along with the dates and times no bank guard will be on duty?

After all, if tens-of-thousands of users won't immediately get the Microsoft Security Patch, don't those patches show hackers exactly which holes get plugged (and which, logically, must already be open without the patch)?

It doesn't take a hacker with more than a basic set of skills to recognize where and what holes got fixed and then reverse-engineer how they can get into computers that don't get updated.

Now, do I have a concrete, 100% bullet-proof answer to this problem? Unfortunately, I don't have more than a common- sense answer...

At this point, your best defense rates staying current on the latest threats and how to defend against them.

Keep your anti-virus software current, your firewall up, and your Windows software updated with the latest security patches.

Though not a perfect solution, at least you'll have a fighting chance to prevent, or at least minimize, any possible threats.

For more information from Microsoft's website, go here http://www.ebookfire.com/download-ject.html

About The Author

Jim Edwards is a syndicated newspaper columnist and the co-author of an amazing new ebook that will teach you how to use fr^e articles to quickly drive thousands of targeted visitors to your website or affiliate links... http://www.TurnWordsIntoTraffic.com

http://www.thenetreporter.com

In The News:

Yahoo! News: Top Stories

UAW to renegotiate labor terms, suspend jobs bank (AP)

AP - The United Auto Workers said Wednesday it is willing to change its contracts with U.S. automakers and accept delayed payments of billions of dollars to a union-run health care trust to do its part to help the struggling companies secure $34 billion in government loans.

Obama: Financial bailout must help homeowners, too (AP)

AP - President-elect Barack Obama signaled a clear desire Wednesday to use a significant portion of $700 billion in financial bailout funds to stanch foreclosures by helping struggling homeowners with their mortgages. "The deteriorating assets in the financial markets are rooted in the deterioration of people being able to pay their mortgages and stay in their homes," he said.

Bombs found in Mumbai train station a week later (AP)

AP - Police searching a mound of baggage abandoned amid the carnage of the attack on Mumbai's main train station found two bombs Wednesday Â— nearly a week after they were left there by gunmen Â— in a stunning new example of the botched security that has become a major issue in India since the three-day siege.

Jeb Bush's bid for Senate could clear GOP field (AP)

AP - Still popular in Florida, former Gov. Jeb Bush said Wednesday that he's interested in the seat Sen. Mel Martinez is giving up, and the field of possible candidates could quickly narrow to make way for the president's younger brother.

Cruise passengers describe 'cheeky' pirate attack (AP)

AP - Ordered to get inside and stay down, Oregon tourist Clyde Thornburg heard the pirates' rifle shots hit the side of the luxury cruise liner Â— "Pop! Pop! Pop!" Â— then felt the ship speed up to escape.

Police arrest aunt in Calif. shackled teen case (AP)

AP - The aunt and one-time guardian of an emaciated and shackled 17-year-old has been arrested, as police tried to determine how she knew the couple accused of holding the teen against his will for nearly a year.

Scientists ask: Is technology rewiring our brains? (AP)

AP - What does a teenage brain on Google look like? Do all those hours spent online rewire the circuitry? Could these kids even relate better to emoticons than to real people? These sound like concerns from worried parents. But they're coming from brain scientists.

Lawyers: Hudson in-law angered by wife's dating (AP)

AP - Prosecutors allege Jennifer Hudson's estranged brother-in-law killed three family members because he was angry the singer's sister was dating another man.

The one that didn't get away yields long-lost ring (AP)

AP - The one that didn't get away held an unlikely surprise for a Texas man. The blue-stoned class ring of Joe Richardson, engraved with his name, turned up inside an 8-pound bass 21 years after he lost it while fishing on Lake Sam Rayburn.

Red Sox give AL MVP Pedroia a 6-year, $40.5M deal (AP)

AP - Dustin Pedroia has a Rookie of the Year award, an MVP, a Gold Glove and Silver Slugger and, of course, a World Series ring.

Obama says automakers' plan is "more serious" (Reuters)

Reuters - President-elect Barack Obama said on Wednesday struggling automakers have put forward a "more serious" restructuring proposal to Congress but withheld judgment on the plans until hearings are held.

Recession fears deepen, rate cuts on horizon (Reuters)

Reuters - Record declines in the vast U.S. and European service sectors and more grim U.S. employment news on Wednesday sparked fear of an economic "free fall," setting up another round of aggressive interest rate cuts.

Rice pushes Pakistan, seeks to curb India response (Reuters)

Reuters - U.S. Secretary of State Condoleezza Rice pressed Pakistan to cooperate fully in the probe into the Mumbai attacks but she also warned India against any action that could stoke regional conflict.

All options on table as Congress reviews autos bailout (Reuters)

Reuters - All options were on the table on Wednesday as congressional committees scrutinized auto company restructuring proposals and an urgent appeal for $34 billion in aid ahead of make-or-break hearings.

Senate Democrats will pack plenty of muscle (Reuters)

Reuters - Senate Democrats will be able to do plenty over the next two years -- despite falling just short of their goal of winning a majority big enough to end Republican procedural roadblocks.

Paulson said weighing bailout's next $350 billion (Reuters)

Reuters - Treasury Secretary Henry Paulson is weighing whether to ask Congress for the remaining $350 billion of the financial bailout fund, with White House aides approaching President-elect Barack Obama's transition team about the idea, an Obama aide said on Wednesday.

U.S.-led coalition in Iraq dwindles as allies leave (Reuters)

Reuters - A string of departures by the U.S. military's allies in Iraq is turning into an exodus as violence subsides and the end of a U.N. mandate permitting their deployment to the country approaches.

Thai protesters lift airport siege (Reuters)

Reuters - Anti-government protesters lifted their crippling, eight-day blockade of Thailand's main airport on Wednesday, raising the hopes of 230,000 stranded tourists even though there is no end in sight to the wider political crisis.

India warns all options open with Pakistan after Mumbai attacks (AFP)

AFP - India on Wednesday warned that all options were open in dealing with Pakistan after last week's attacks on Mumbai, as the United States pressured Islamabad to show urgent cooperation with the probe.

Riot police break up Zimbabwe protests as cholera deaths mount (AFP)

AFP - Baton-wielding riot police broke up protests in Harare and detained dozens Wednesday, as the death toll of a cholera epidemic neared 600 in Zimbabwe's worsening health and economic crises.

Does Microsoft Show Hackers How To Attack?

Personal Technology Personal Technology