MacDailyNews - Where Mac news comes first

 MacDailyNews Poll

Deal of the Day

5 Day Most Commented

Opinion Archive

Current Headlines

Latest Joy of Tech

  • Latest Joy of Tech!

MacNN

AppleInsider

Macworld UK

TUAW

MacRumors

Yahoo! Finance AAPL

iTunes Top 10 Albums

Mac OS X Downloads

Thu, Mar 18, 2010 - 05:02 AM EDT  —  AAPL: 224.12 (-0.33, -0.15%)  |  NASDAQ: 2389.09 (+11.08, +0.47%)

Same old, same old: Microsoft’s Vista service pack, er, ‘Windows 7’ allows remote BSOD attacks
Tuesday, September 08, 2009 - 02:22 PM EDT

"Windows 7 when it ships next month will be vulnerable to an attack that hasn't been possible since 1999, a new vulnerability found by a security researcher shows," Electronista reports.

"Sending a deliberately malformed network negotiation request can force a Windows 7 system into a page fault that triggers a 'blue screen of death' error, even without the user's help in launching the code," Electronista reports. "The attack affects both 32-bit and 64-bit versions of the OS."

Electronista reports, "The flaw stems from the rewritten network stack inherited from Vista, which itself has also been discovered as vulnerable to the attack."

"The attack comes at a particularly inopportune time for Microsoft, as it has been trying to market Windows 7 as its most secure release and is in the rare circumstance of having to compete against another major operating system release, Mac OS X Snow Leopard," Electronista reports.

Full article here.

MacDailyNews Take: The only sure things in life are death, taxes, and Microsoft's ineptitude:

Direct link via YouTube here.

Bookmark and Share

Always -- Free ground shipping with orders over $50 at the Apple Store.

Reader Feedback: = registered.
Unregistered users: Feedback from multiple usernames are subject to deletion. Off-topic and posts from suspected astroturfers will be removed.

Reader feedback page 1 of 1 pages:
Sep 08, 09 - 02:25 pm Comment from: MacDave

It's probably not very snappy either.

Sep 08, 09 - 02:28 pm Comment from: Cubert

I guess M$ felt they needed some pastel colored code from Winblows ME.

(By far the WORST Winblows version ever (which is like deciding whether it is worse to be kicked in the left nut or the right)).

Sep 08, 09 - 02:29 pm Comment from: HMCIV

@MacDave

No but you'd be surprised at how it crackles and pops!

Sep 08, 09 - 02:29 pm Comment from: I Never Would Have Guessed

Microsoft, Microsoft, Microsoft... it's always the same story with you, isn't it? Luckily, I just got my best friend to switch; he loves his new Mac. Next step? Get him to dump Windows. wink

MW: sound, as in "Is that the sound of the MS FUD machine starting up again, to spread FUD about how Snow Leopard is so "unstable" and "insecure"?" Sounds like it to me.

Sep 08, 09 - 02:31 pm Comment from: C

Rename it WinFeces

Sep 08, 09 - 02:32 pm Comment from: Scot Murphy

So will it be Windows 7 SP 1 or Windows Vista SP3 SP1?

Sep 08, 09 - 02:32 pm Comment from: Gordon Horne

The circumstance of having to compete against another major operating system release is because Microsoft has so few releases.

Sep 08, 09 - 02:33 pm Comment from: Gordon Horne

Damnit. "is rare because…"

Sep 08, 09 - 02:47 pm Comment from: wedontgottaworryaboutit

At least I don't have to worry about those pesky Windows problems with my Mac OS X: Leopard, Service Pack Snow err, I mean, Snow Leopard.

Sep 08, 09 - 02:56 pm Comment from: Predrag

Don't you just love that picture? For the uninformed, this is the icon used in Mac OS X (I believe, since the Tiger) to represent SMB shares (i.e. Windows computers with shared folders). This was always a delightful little joke, especially if you are on a Mac in a heterogeneous Mac/Win environment. When you open up your 'Network' folder, you get to see all machines with accessible shared volumes. Macs are represented by icons showing the exact model, while Windows machines look like the picture above -- an old CRT monitor with a Blue Screen of Death. Just priceless!

And now, in Snow Leopard, you can make these icons huge (to the point of being able to read that error message).

Sep 08, 09 - 03:07 pm Comment from: b

Cubert, that was the first time i've EVER guffawed out loud from reading a post.

Brilliant!

Sep 08, 09 - 03:12 pm Comment from: RePlay

Oh, boy. A negative day exploit.

1. Box arrives.
2. Open box.
3. Install new operating system.
4. BSOD
5. Reinstall operating system.
6. BSOD
6. BSOD
6. BSOD
7. Reinstall operating system.
8. ....
9. ....

Ah, life with Windows.

Sep 08, 09 - 03:21 pm Comment from: LateRegistrant

@C
Windoodoo 7 ?

Sep 08, 09 - 03:25 pm Comment from: TheConfuzed1

I'm guessing that any cloud-based service from Apple, will be more for syncing, than anything else, with the option to stream.

In other words, like Mobile Me is now, plus the new feature of streaming.

Apple isn't the kind of company that is likely to screw something up that works well already.

Sep 08, 09 - 03:26 pm Comment from: TheConfuzed1

Whoops. Wrong thread.

Sep 08, 09 - 03:26 pm Comment from: Gabriel

"The flaw stems from the rewritten network stack inherited from Vista, which itself has also been discovered as vulnerable to the attack."

This is what happens when you refuse to use time-tested open-source networking code that's freely available. Gotta love Microsoft's continued stubbornness and refusal to give in to the undeniable advantages offered by true open-source licensing.

MW: time - only a matter of time before they have to swallow some serious pride on this front.

Sep 08, 09 - 03:29 pm Comment from: ken1w

Something from 1999? Does it also have the Y2K bug?

To reduce bloat-age, I guess Microsoft went back to Windows 98 for the codebase of Windows 7 components.

Sep 08, 09 - 04:05 pm Comment from: NHL

"
"... Microsoft ... has been trying to market Windows 7 as its most secure release ..."

Geez, talk about "not raising the bar by much".

Sep 08, 09 - 04:36 pm Comment from: Spark

Looks like MDN has finally a discovered a use for 512px icons. Looks good!

Sep 08, 09 - 04:59 pm Comment from: freebeer

It's all part of the plan to promote and eventually migrate users to Azure - Windows' new Web OS platform. It's important for Windows users to see the same BSOD so to provide consistent user experience no matter what future device or browser you plan to use Windows on.

Sep 08, 09 - 04:59 pm Comment from: Ray

You guys miss the point completely.....By being susceptible to old exploits Microsoft causes hackers to become complacent and lazy. Hence, keeping them from pushing their craft forward and finding the new and larger exploits available to them in the new Windoze.

just my $0.02

Sep 08, 09 - 05:03 pm Comment from: Mac-nugget

Windows 7 is a dog compared to Snow Leopard. I am currently running Windows 7 on my Mac Pro, and it is very very slow compared to Snow Leopard. Hack, it is slow compared to Panther.

So not only slow and buggy, but also vulnerable. Nice.

Sep 08, 09 - 05:12 pm Comment from: MacGuy

Snappier for Hackers!

Sep 08, 09 - 05:15 pm Comment from: aka Christian

Last school year, students in my district discovered how to go into XP's "Run" menu and horse around a little and shut down other computers on the network. This will go over just as well as that did when we start using 7 next year. Hopefully Microsoft will have this hole plugged by then with... a service pack. Let's see, that will be "Vista Service Pack, er Windows 7 Service pack x" by then. Yay.

Sep 08, 09 - 06:50 pm Comment from: jaundiced

As screwed up as M$ and all versions of Doze are, it still is an uphill fight for Apple. Yes, this is a big deal to us Apple fanboys, but as of now, there is no story on the websites of CNN, BBC, and USA Today, and several other sites I quickly looked at after I saw the story here.

"We" get a laugh out of this, but the rest of the world doesn't care. Unfortunately Win 7 will be HUGE, in spite of one more gigantic CF.

Sep 08, 09 - 08:49 pm Comment from: Mr. Reeee

It's not a screw up! It's Microsoft's contribution to keep IT workers employed!

Think of the alternative... an operating system and applications that actually work, needing little support? Why, it's UNthinkable!

Sep 08, 09 - 08:58 pm Comment from: ErnieP

Sorry, but Snow Leopard (Leopard SP2) is buggier than Windows 7 RC.

Sep 08, 09 - 10:32 pm Comment from: Tune Zang©

You mac lemmings must know this is perfectly normal. Real world computers are this way because they do things in the real world. The only thing macs are good is at displaying gigantic icons nobody cares. BSOD is a healthy mechanism to protect valuable data; that is why macs don't have BSOD. Soon, this will be over and we'll see light (after rebooting, of course)

Your BSOD, our fault.

Sep 08, 09 - 11:07 pm Comment from: jaundiced

@ErnieP:

You win. I think to an absolute person here we'd agree: A RELEASED OS X 10.6 is buggier than an UNRELEASED Win 7.

You are a total genius to nail us so hard.

Sep 09, 09 - 12:22 am Comment from: quack quack

Win7 is a patched up Vista. The RC is basically a patched up and tweaked full version of Vista.

Snow Leopard on the other hand is a heavily rewritten Leopard.

Rewriting is a much riskier thing than simply patching up, and thus, resulting in more bugs. It's expected.

Not trying to be an apologist, but I really did expect this result.

Sep 09, 09 - 01:12 am Comment from: Savage

It's a fact that Snow Leopard now scrolls like butter...

Sep 09, 09 - 02:56 am Comment from: David

Yawn.When do we eat?

Sep 09, 09 - 09:27 am Comment from: Ray

@ErnieP

You are right, SL is very buggy. I hope Apple fixes it soon because I am tired of not being able to use Xcode for my work.

just my $0.02

Oct 14, 09 - 06:48 pm Comment from: Parrish

Badly need your help. I have lost friends, some by death... others through sheer inability to cross the street.
I am from Iraq and bad know English, give true I wrote the following sentence: "serving a three pint shopping, he will receive his 40 prices of food in the girls of fat-soled poster, market and image to include try the transportation airport vibration."

Thanks for the help wink, Parrish.

Nov 12, 09 - 07:43 am Comment from: Castalia

Excuse me. It's takin' whatever comes your way, the good AND the bad, that give life flavor. It's all the stuff rolled together that makes life worth livin'. Help me! I find sites on the topic: Sonicare vibrator. I found only this - http://www.comune.gromo.bg.it/Members/Vibrator/vibrator-remote-controlled. Bsc-16 negotiate an mechanism with a hand harness system. The point was even just. Best regards :eek:, Castalia from Armenia.

Reader feedback page 1 of 1 pages:

Always -- Free ground shipping with orders over $50 at the Apple Store.

Add Your Feedback:

Register or Login

Name:

Email: (optional)

Emoticons | Allowed HTML Tags

Remember my info   Notify me of follow-up comments?

Please enter the "MDN Magic Word" you see in the image below: