Home Messages Index
[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index

Re: No safety for SMB2 users yet

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

____/ Chris Ahlstrom on Thursday 01 Oct 2009 23:25 : \____

> After takin' a swig o' grog, nessuno belched out
>   this bit o' wisdom:
> 
>> <Quote>
>> The Windows SMB2 security hole remains open and with malware out now
>> that can take advantage of it, it's more dangerous than ever, but
>> there's still no patch for it....[SMB2 is] not nearly as secure as
>> plain old SMB....
>>
>> on September 28th, Harmony Security senior researcher Stephen Fewer
>> released code that lets anyone try to run unauthorized software on a
>> Windows Vista, Server 2008, and early pre-releases of Windows 7.
>>
>> And has Microsoft rushed to the rescue? Nope. In fact, experts think
>> that the earliest Microsoft will be able to fix the problem will be on
>> the next Patch Tuesday, October 13th. In the meantime, Microsoft
>> recommends that you should just turn SMB2 off.
>> </Quote>
>>
>> http://www.itworld.com/security/79507/no-safety-smb2-users-yet
> 
> That's what happens when you "fuck with Samba"  :-D

Obligatory reference:

FLOSS Weekly 14: Jeremy Allison of Samba

,----[ Quote ]
| 'In the section of the interview from around 33m30s to 39m00 Jeremy
| Allison reports how he was told that the Microsoft team implementing
| SMB2 were ordered to "f**k with Samba".'
`----

http://www.twit.tv/floww14

- -- 
		~~ Best of wishes

Microsoft loves competition.
"Iâd be glad to help tilt lotus into into the death spiral. I could do it Friday afternoon but not Saturday. I could do it pretty much any time the following week."
		--Brad Silverberg, Microsoft
http://Schestowitz.com  |  GNU is Not UNIX  |     PGP-Key: 0x74572E8E
roy      pts/0        :0               Sat Oct  3 00:47   still logged in   
      http://iuron.com - proposing a non-profit search engine
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkrJC0EACgkQU4xAY3RXLo61UwCfaNpKofVXFkTpfgsMGyr6p3bW
VHUAnjkNYt8dTHCQmEgxGry2lb+jGIAR
=ZJ74
-----END PGP SIGNATURE-----

[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index