Comments on: Microsoft Warns of Uptick in Attacks on Unpatched Windows Flaw http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/ In-depth security news and investigation Sat, 11 Feb 2012 19:29:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: drzaiusapelord http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7612 drzaiusapelord Mon, 19 Jul 2010 17:50:34 +0000 http://krebsonsecurity.com/?p=3904#comment-7612 What? Runas is a basic functionlity of the OS since the NT days. Windows handles multiple security contexts. Your user account is one and the admin accounts are another. Runas lets you change them. Saying Runas is a stop-gap is like saying su or sudo are stopgaps too. What? Runas is a basic functionlity of the OS since the NT days. Windows handles multiple security contexts. Your user account is one and the admin accounts are another. Runas lets you change them. Saying Runas is a stop-gap is like saying su or sudo are stopgaps too.

Like or Dislike: Thumb up 2 Thumb down 1
]]> By: David McCullough http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7467 David McCullough Sun, 11 Jul 2010 22:03:36 +0000 http://krebsonsecurity.com/?p=3904#comment-7467 Great points here. I have family whose computers I regularly maintain and I believe that having them use a limited user account has saved me a lot of grief and time. I'd prefer to see them all using 64bit Windows 7 due to its inherent protections but it's not going to happen right away so we use the defenses that we have available. I appreciate and have learned a lot from the informed audience here at krebsonsecurity.com. Great points here. I have family whose computers I regularly maintain and I believe that having them use a limited user account has saved me a lot of grief and time.

I’d prefer to see them all using 64bit Windows 7 due to its inherent protections but it’s not going to happen right away so we use the defenses that we have available.

I appreciate and have learned a lot from the informed audience here at krebsonsecurity.com.

Like or Dislike: Thumb up 1 Thumb down 1
]]> By: 67GTV http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7433 67GTV Fri, 09 Jul 2010 18:12:03 +0000 http://krebsonsecurity.com/?p=3904#comment-7433 The RunAs command is merely a stop-gap solution to, as the name implies, simply RUN an application. ALL installations and updates should be run under the Local Administrator account. RunAs will not give full access to the Registry among other system resources. The RunAs command is merely a stop-gap solution to, as the name implies, simply RUN an application. ALL installations and updates should be run under the Local Administrator account. RunAs will not give full access to the Registry among other system resources.

Like or Dislike: Thumb up 0 Thumb down 4
]]> By: drzaiusapelord http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7429 drzaiusapelord Fri, 09 Jul 2010 14:44:51 +0000 http://krebsonsecurity.com/?p=3904#comment-7429 Shift-right-click and select RunAs. Now just run it as admin. No need to log out. Shift-right-click and select RunAs. Now just run it as admin. No need to log out.

Like or Dislike: Thumb up 2 Thumb down 1
]]> By: Bob http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7374 Bob Wed, 07 Jul 2010 19:41:58 +0000 http://krebsonsecurity.com/?p=3904#comment-7374 Where ever I can, I set up limited users. If my daughter needs to install something (she's 34) she still calls dad to help her. I have put the MS Security Essentials on all our computers (desktops, laptop, and netbook) and run limited users all the time. Knock on wood, no problems yet. Where ever I can, I set up limited users. If my daughter needs to install something (she’s 34) she still calls dad to help her. I have put the MS Security Essentials on all our computers (desktops, laptop, and netbook) and run limited users all the time.

Knock on wood, no problems yet.

Like or Dislike: Thumb up 1 Thumb down 4
]]> By: 67GTV http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7372 67GTV Wed, 07 Jul 2010 16:17:29 +0000 http://krebsonsecurity.com/?p=3904#comment-7372 As Aurelius so succinctly stated, all Windows Updates and patches should be applied while logged on under the Local Administrator account. Setting Windows Update to download and install patches automatically foregoes the hassle of this log off/log on routine on a monthly basis. Kudos to you Bob, for running as a Limited User! It may be an inconvenience to have to log off then back on under the Local Administrator account, but this is also inconvenient for malware execution. Most malicious software cannot deliver the intended payload due to lack of authority under the Limited User's account. As Aurelius so succinctly stated, all Windows Updates and patches should be applied while logged on under the Local Administrator account. Setting Windows Update to download and install patches automatically foregoes the hassle of this log off/log on routine on a monthly basis.

Kudos to you Bob, for running as a Limited User! It may be an inconvenience to have to log off then back on under the Local Administrator account, but this is also inconvenient for malware execution. Most malicious software cannot deliver the intended payload due to lack of authority under the Limited User’s account.

Like or Dislike: Thumb up 3 Thumb down 3
]]> By: Aurelius http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7365 Aurelius Tue, 06 Jul 2010 08:53:39 +0000 http://krebsonsecurity.com/?p=3904#comment-7365 ALL updates to the system require Admin privileges. Absolutely all. The only updates that don't require Admin privileges are updates that don't actually affect the entire OS installation but just one user account. This vulnerability probably isn't even exploitable with a decent browser, btw. Opera for example should not process HCP urls so it shouldn't be vulnerable (unless you're using the WMP plugin, which you probably shouldn't be). See here: http://my.opera.com/community/forums/topic.dml?id=610682

ALL updates to the system require Admin privileges. Absolutely all. The only updates that don’t require Admin privileges are updates that don’t actually affect the entire OS installation but just one user account.

This vulnerability probably isn’t even exploitable with a decent browser, btw. Opera for example should not process HCP urls so it shouldn’t be vulnerable (unless you’re using the WMP plugin, which you probably shouldn’t be). See here: http://my.opera.com/community/forums/topic.dml?id=610682

Well-loved. Like or Dislike: Thumb up 9 Thumb down 1
]]> By: Bob http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7364 Bob Tue, 06 Jul 2010 05:33:42 +0000 http://krebsonsecurity.com/?p=3904#comment-7364 I clicked on the link to download the Fixit routine. It landed on my desktop. I run as a limited user. It won't install unless I'm an admimistrator. Why can't Microsoft (or anybody who is updating a program) tell the user what rights and permissions are required BEFORE you download the update?

I clicked on the link to download the Fixit routine. It landed on my desktop. I run as a limited user. It won’t install unless I’m an admimistrator. Why can’t Microsoft (or anybody who is updating a program) tell the user what rights and permissions are required BEFORE you download the update?

Hot debate. What do you think? Thumb up 5 Thumb down 7
]]> By: n3td3v http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7363 n3td3v Tue, 06 Jul 2010 00:17:57 +0000 http://krebsonsecurity.com/?p=3904#comment-7363 http://n3td3v.blogspot.com/2010/07/message-from-discussion-cyber.html Andrew Hidden due to low comment rating. Click here to see.

Poorly-rated. Like or Dislike: Thumb up 5 Thumb down 15
]]> By: David Chasey http://krebsonsecurity.com/2010/07/microsoft-warns-of-uptick-in-attacks-on-unpatched-windows-flaw/comment-page-1/#comment-7362 David Chasey Mon, 05 Jul 2010 21:03:45 +0000 http://krebsonsecurity.com/?p=3904#comment-7362 My assumption has been that it's better to be free of a third party website, such as The Washington Post and The New York Times. - David

My assumption has been that it’s better to be free of a third party website, such as The Washington Post and The New York Times. – David

Hot debate. What do you think? Thumb up 7 Thumb down 6
]]>