Attacks prompt third parties to fix flaw

[imhotep]

Attacks prompt third parties to fix flaw

Attacks targeting the latest flaw in Microsoft's operating system have
convinced two groups to release temporary fixes to protect users while the
software giant develops its own patch.

The attacks attempt to exploit the Windows Shell vulnerability acknowledged
by Microsoft last week, according to the SANS' Internet Storm Center, which
raised its alert level to Yellow after the organization's handlers received
reports of a significant number of attacks.

Two groups have published software tools to protect against attacks that
attempt to exploit the Windows Shell vulnerability. Security professionals
who previously formed the Zeroday Emergency Response Team (ZERT) published
on Saturday an update for a custom security tool aimed at protecting users
temporarily from the attacks. Security firm Determina has also developed a
software patch that will protect users against the attacks.


http://www.securityfocus.com/brief/318

Imhotep

 

[Leythos]

I fixed your posting headers so that people that were following the
thread could properly reply after your broken follow-up method.

 

[Dan W.]

I fixed your posting headers so that people that were following the
thread could properly reply after your broken follow-up method.

Fantastic, thank you Leythos. I was always wondering why I could never
reply to Imhotep.

 

[karl levinson, mvp]

Fantastic, thank you Leythos. I was always wondering why I could never
reply to Imhotep.

Of course, whether or not your post makes it to Imhotep, the end result is
the same.

 

[imhotep]

I fixed your posting headers so that people that were following the
thread could properly reply after your broken follow-up method.

Not my fault your newsgroup reader does not work correctly...but thanks
anyway...

 

[Leythos]

Not my fault your newsgroup reader does not work correctly...but thanks
anyway...

Why do you reply in all the groups, but want people to only reply in one
of the groups?

 

[imhotep]

Why do you reply in all the groups, but want people to only reply in one
of the groups?

Well I already told you but fair is fair. You asked an honest question and I
will answer it *one* more time. Although, It would be more approiate to
take this offline...


I usually only post alert type messages that are security related unless I
come across something that I can help with (replying to someone's
question). When I post one of these alert type messages it usually is to
many news groups related to the topic (like this one "Attacks prompt third
parties to fix flaw"). However, I have over 20+ newsgroups that I *try* to
check every couple of days or so. Many times someone will reply incorrectly
(reply to one of the newsgroups I do not frequently check) and as such I
might not see their reply for days or more. Now, I assume that if someone
is replying to me they actually want me to read their post. Since I do not
have the time anymore to go to all of the newsgroups daily like I used to,
I set the "Followup-To" to a newsgroup that I do check regularly. That way
I will see their reply in a timely fashion *without* having to look at
every newsgroup every night. It is just too much.

Now, as I said before you are in full control on how you reply. If you reply
to me make sure that at least one message goes to the group listed in
the "followup-to" and I will see it. If you wish to start a sub thread and
do not need this functionality you are free to put anything you wish in
these fields; put whatever you want. Just because I use this does not mean
*you* need to....

Now, I am sorry your news reader, MicroPlanet-Gravity, coughs on this,
really I am. However, what I am doing is fully within the RFCs for NNTP and
is *not* malicious. I have heard outlook express also has a problem with
this in the past. I do not know the status of OE as I have not used it in 8
or so years.

Now, I am considering this discussion closed. If you have anything to add
about *this* thread "Attacks prompt third parties to fix flaw" please
do...as I have many questions my self.


Imhotep

 

[Roger Abell [MVP]]

Why do you reply in all the groups, but want people to only reply in one
of the groups?

I notice the reply you recently received only answered the last half of your
question, but was totally silent on the "Why do you reply in all the groups"
part, which is clearly what makes the threads disjointed.

Roger

 

[Dan W.]

Of course, whether or not your post makes it to Imhotep, the end result is
the same.

Very true and thanks for your input, Karl.

 

[Leythos]

Now, I am sorry your news reader, MicroPlanet-Gravity, coughs on this,
really I am. However, what I am doing is fully within the RFCs for NNTP and
is *not* malicious. I have heard outlook express also has a problem with
this in the past. I do not know the status of OE as I have not used it in 8
or so years.

Obviously you are doing it to be malicious, as anyone making a reply,
with any usenet client, will follow the posting groups and reply in
those groups. Your argument does not work, unless the posters Usenet
client is misconfigured (like yours), everyone will see their reply.

You are not helping, you are making it harder.

If you want personal touches you need to stick with email, proper usenet
methods for posting group messages to multiple areas also mean that you
leave the follow-up alone. There is no valid reason to screw-up the
message paths.

Since most of the people you are posting to are noobs, with OE, you are
purposely screwing with them, as they may never read your reply.

 

[Dan W.]

Obviously you are doing it to be malicious, as anyone making a reply,
with any usenet client, will follow the posting groups and reply in
those groups. Your argument does not work, unless the posters Usenet
client is misconfigured (like yours), everyone will see their reply.

You are not helping, you are making it harder.

If you want personal touches you need to stick with email, proper usenet
methods for posting group messages to multiple areas also mean that you
leave the follow-up alone. There is no valid reason to screw-up the
message paths.

Since most of the people you are posting to are noobs, with OE, you are
purposely screwing with them, as they may never read your reply.

I am hardly ever able to reply to Imhotep either and I use Mozilla
Thunderbird which is an open source solution. What the heck is wrong
with your newsreader, Imhotep or are you super paranoid about having
your posts replied to. I thought it was Microsoft's fault at first but
now I see the light that it is most likely the way you have your
newsreader configured. Either join the game with your feedback and get
with the program or please start posting elsewhere. I am only partially
saying this to be an a____e and hope that you do change and that we can
get along. I do appreciate the notices but you should be positive to
all technology solutions and not demonize one solution over another. I
would say no product offers the complete answer and only a plethora of
products allows a somewhat positive experience. Have a nice day!

 

[Dan W.]

I am hardly ever able to reply to Imhotep either and I use Mozilla
Thunderbird which is an open source solution. What the heck is wrong
with your newsreader, Imhotep or are you super paranoid about having
your posts replied to. I thought it was Microsoft's fault at first but
now I see the light that it is most likely the way you have your
newsreader configured. Either join the game with your feedback and get
with the program or please start posting elsewhere. I am only partially
saying this to be an a____e and hope that you do change and that we can
get along. I do appreciate the notices but you should be positive to
all technology solutions and not demonize one solution over another. I
would say no product offers the complete answer and only a plethora of
products allows a somewhat positive experience. Have a nice day!

This was directed at imhotep and not Leythos.

 

[imhotep]

This was directed at imhotep and not Leythos.

I do not demonize any solution. As I stated to lyther or whatever his name
is: I do this because I do not have time to read ever newsgroup I post to.
I usually post alert type posts...

Now, I use the followup-to to point to a newsgroup I do try to check daily.
This is out of respect for someone who replies to me. If you are repling
but do not care if it is to me, set your headers any way you wish...

Now, what specifically are you having a problem with? What does your
newsreader do when it sees a "Followup-to". Please describe the problem so,
at least, I can understand it.

Honestly, my newsreader works well with or without the "followup-to"...which
is why I do not understand your problem....


Im

 

[Leythos]

I do not demonize any solution. As I stated to lyther or whatever his name
is: I do this because I do not have time to read ever newsgroup I post to.
I usually post alert type posts...

And as was stated to you: Some servers don't carry the group you set the
follow-up too, some people don't read that group, but, if you don't mess
with the follow-up, then everyone doing a reply, with a proper usenet
client, will be visible to everyone else in the thread.

Your method breaks the cross-posting model, breaks the reply method,
breaks the ability to reply for people that use Usenet servers that
don't have the security group.

 

[imhotep]

And as was stated to you: Some servers don't carry the group you set the
follow-up too, some people don't read that group, but, if you don't mess
with the follow-up, then everyone doing a reply, with a proper usenet
client, will be visible to everyone else in the thread.

Again, you miss the point, again I try to make you
understand...merry-go-round anyone...

...and as stated by me, which you neglected to include (on purpose?) I set
the header SO PEOPLE CAN REPLY TO ME. Again, if YOU do not need it don;t
set it. In either case stop acting like a freak.

Your method breaks the cross-posting model, breaks the reply method,
breaks the ability to reply for people that use Usenet servers that
don't have the security group.

Hum...works quite well for me. It seems that *your* news reader has problems
or the user or both...Now, some truth feels go doesn't it?

Imhotep

 

[Leythos]

Again, you miss the point, again I try to make you
understand...merry-go-round anyone...

No, you just can't seem to understand that what you are doing impacts
others and not yourself, that it would NOT impact your ability to read
replies if you stopped doing it.

..and as stated by me, which you neglected to include (on purpose?) I set
the header SO PEOPLE CAN REPLY TO ME. Again, if YOU do not need it don;t
set it. In either case stop acting like a freak.

People don't reply to you, they reply to posts, and they can reply to
them, posted in any of the groups, and it will automatically reply in
ALL GROUPS POSTED, that's how Usenet Clients work - they post the reply
to all groups listed in the NewsGroups header. So, that means that if
you post a message to 6 groups, when a person replies, it sets a link to
all 6 groups and the reply is seen in ALL 6 GROUPS.

Hum...works quite well for me. It seems that *your* news reader has problems
or the user or both...Now, some truth feels go doesn't it?

My newsreader works, follows the standards and has no problems with your
posts, but you purposely ignore that you break replies, that you limit
the thread after it's started, and that some people don't have all the
groups or the one you set the follow-up to - which defeats your reason
for doing it, twice, in the first place.