Source code opens window to old IE flaw

TalkBack 18 of 51:

Next »

« Previous

• Thread View
• Flat View

The evidence of lack of security in IE and Microsoft's OS

Unpatched Internet Explorer Bugs
http://www.safecenter.net/UMBRELLAWEBV4/ie_unpatched/index.html
There are currently 24 items, updated on 2004/01/27
That is, at least ( there have been a couple of new ones discovered this month ) 24 vulnerabilities, many of them remotely exploitable and capable of uploading and executing scripts and binaries on a clients PC, for which Microsoft has chosen not to release a fix/update to close the potential hole.

Read Shattering Windows: Is a Disaster Lurking?
http://www.eweek.com/print_article/0,3048,a=109729,00.asp

The Shatter Attack exposes inherent vulnerabilities in the overall design of Microsoft's operating system application interface . Microsoft has known about this class of vulnerability since 1994.
http://security.tombom.co.uk/moreshatter.html
This has been more than long enough for Microsoft to develop a more secure alternative API and deprecate the unsecureable GDI interface. Instead Microsoft continued to develop applications using the unsecure APIs and promote their use with the Microsoft development tools for third party developers.

In May 2002, under oath at the antitrust hearing Jim Allchin, group vice president for platforms at Microsoft, stated that, because the Windows operating systems contained inherent flaws, disclosing the Windows operating system source code could damage national security and even threaten the U.S. war effort.
http://www.eweek.com/article2/0,3959,5264,00.asp

By the way, In February 2003, Microsoft signed a pact with Chinese officials to reveal the Windows operating system source code. Bill Gates even hinted that China will be privy to all, not just part, of the source code its government wished to inspect.
http://zdnet.com.com/2100-1104-990526.html

Dispite gaining more favored trading status with the USA, there remains many embargos over technology transfers which could put the US at future risk.
http://www.newsmax.com/archives/articles/2003/10/9/160700.shtml

Either Jim Allchin lied under oath, to prevent code revelation being any part of the settlement, OR the Microsoft corporation is behaving traitorously, by exposing national security issues to foreign governments.

Bill Gates' Memo putting security as a top priorty in January 2002 ...
http://www.theregister.co.uk/content/4/23715.html
... was reminiscent of announcements of the old "five year plans" from the old Soviet and Maoist regimes.
http://groups.google.com/groups?selm=slrna4k6r5.jhf.heretic@heretic.ihug.co.nz

The exposure of Microsoft source code put users at risk because of the inherent design and implimentation flaws built into the source code.

Posted by: David Mohring   Posted on: 02/18/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Building the Virtualized Enterprise with VMware Infrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now