Ever wanted to switch away from windows? You may think about it now. - Tilted Forum Project Discussion Community

Kurant · 06-26-2004, 06:42 AM

http://www.msnbc.msn.com/id/5290386/

Quote:

Wide-scale attack didn't materialize, but method is alarmingBy Bob Sullivan
Technology correspondent
MSNBC
Updated: 6:36 p.m. ET June 25, 2004Computer security experts worked through the night Thursday beating back an alarming Internet nemesis which threatened to steal personal information from Web users, who had little chance to protect themselves. By Friday morning, the incident was contained, and a large-scale attack never really materialized, most experts said. Still, the danger from the new method is very real, according to Microsoft Corp. and government officials. Both are on the lookout for inevitable variations which are sure to follow.

advertisement

The complex multi-stage attack was considered so dangerous because it could infect Internet users who simply browsed well-known Web sites. Computer intruders had broken into Web servers around the world, in a coordinated effort, and placed secret code on company Web pages that allowed visitors' computers to be hijacked.

Those who visited an infected Web site were secretly redirected to a Web page hosted in Russia. Then a Trojan horse program was installed on victims' computers -- one that allowed the computer intruders to copy user names, passwords, credit card information, and other data.

Three separate software flaws
In designing the attack, the intruders took advantage of three separate software flaws: two in Microsoft's Internet Explorer Web browser, which allowed hijacking of individual computers, and one in Microsoft's Internet Information Services software, which is used to host Web pages. One of the Internet Explorer flaws hasn't been patched yet, Microsoft said. (MSNBC is a Microsoft - NBC joint venture.)

"We do view this threat as very real," said Microsoft Security Program Manager Stephen Toulouse. "We worked through the night on this."

Initial reports Thursday night said that popular Web sites were infecting visitors. The sites were not named. But there was little evidence a wide-scale attack materialized.

Anti-virus firms indicated few consumers had been hit with the Trojan horse -- Symantec Corp. had received under 10 reports from customers. Network Associates' Craig Schmugar could only find about 5 sites that had been hit with the malicious code. Microsoft said the number of impacted Web sites was "in the dozens." Meanwhile, the government's computer security arm, the CERT Coordination Center, put the number at fewer than 100.

Still, among the list of the affected Web sites were "several sites that are very popular," Marty Lindner, said a senior member of CERT's technical staff. He declined to name the sites, or to indicate if they were among the Internet's 50 most popular sites.

On the other hand, Symantec's Alfred Huger said he hadn't heard of any top sites distributing the malicious code.

"Have any big sites been infected? Not that we know of," he said. "EBay and PayPal were in no way infected, as far as we know."

What consumers can do
Still, CERT and the Department of Homeland Security issued warnings about the incident on Thursday night, and companies were told to make sure their Web sites were patched against the Internet Information Services flaw.

The immediate threat from Thursday night's incident has largely passed; the Russian Web site which installed the Trojan horse has been taken offline. But experts expect copycat attacks.

"It's quite possible the bad guys are altering it and we'll just have another round of this later," Lindner warned.

Consumers who believe their computers may already be infected can search for the files “Kk32.dll” or “Surf.dat” and remove them using anti-virus software.

There is no patch yet for consumers to use to protect themselves against a copycat incident which might follow. But they can still protect themselves by strengthening the security settings in Internet Explorer. Microsoft recommends clicking on Tools/Internet Options and selecting the security tab, then setting the Internet zone security level to high. That will prevent a variety of code from being installed on a users' machines by Web sites. By default, the setting is placed on medium.

Another way to avoid the Trojan horse is to use non-Microsoft browsers such as Mozilla and Opera. Security experts also said that the infection does not affect Macintosh versions of Internet Explorer.

More details are available on a special site Microsoft has published with information about the attack.

© 2004 MSNBC Interactive

Microsoft better do somthing fast, this is out of control.

Dragonlich · 06-26-2004, 07:15 AM

Alternatively, you could still use Windows, and use an alternative browser like the MSNBC story said. That, and use a firewall.

yakimushi · 06-26-2004, 08:32 AM

http://www.mozilla.org/products/firefox/

'Nuff said.

oberon · 06-26-2004, 09:42 AM

How does a firewall help with this sort of problem?

Krycheck · 06-26-2004, 04:10 PM

Quote:

Originally posted by yakimushi
http://www.mozilla.org/products/firefox/

'Nuff said.

Lasereth · 06-26-2004, 04:37 PM

I'll think about switching from Windows when an OS with wide support is established. Linux and the rest may be awesome, but until I can run the programs I gotta have on those OS's, Windows it is. Now if only companies would start developing more programs and applications for Linux...but I can only imagine how many resources it must take to code a program for two seperate OS'es. Oh well, I guess Microsoft will just keep putting out those updates!

-Lasereth

Jam · 06-26-2004, 04:58 PM

Quote:

Originally posted by yakimushi
http://www.mozilla.org/products/firefox/

'Nuff said.

Kurant · 06-26-2004, 05:06 PM

Companies won't develop software for a OS they can't charge fees to liscence the software too. Linux is still free source code. Linux in general, you can get for free all over the net. However, I use SuSe and I'd never go back to Windows. Yes, I do have to live without a few things. But the basic things I do on my desktop like gaming and reading boards, general web-surfing. It's flawless.

I do use Windows on my laptop however, there is no other way. Linux just doesn't offer enough support to use the things I need.

sailor · 06-26-2004, 05:30 PM

Quote:

Originally posted by yakimushi
http://www.mozilla.org/products/firefox/

'Nuff said.

brandon11983 · 06-26-2004, 11:00 PM

http://www.apple.com/powermac/

'Nuff said.

zero2 · 06-27-2004, 06:23 PM

I haven't been able to make the switch yet from windows to linux.

Although I would like to be able to feel more secure, and not have to worry about windows viruses, and os flaws, there isn't a guarantee you won't run into those problems using Linux, Unix, or Mac.

All though the likelyhood of getting a virus on those platforms may seem like the likelyhood of getting struck by lightning, the one big thing that has kept me from making the switch is that, software developers are more likely to make a program for windows.

Until multi-platform support is widely available...like others here, the only thing I can do is find ways around these things.

Booboo · 06-28-2004, 08:56 PM

Would MyIE2 be considered an alternate browser?

Speed_Gibson · 06-28-2004, 09:51 PM

Quote:

Originally posted by Booboo
Would MyIE2 be considered an alternate browser?

that would be 'no' as it still uses IE for everything. Anything using the Presto or Gecko rendering engine would fit the description.

Jakejake · 06-29-2004, 06:17 AM

Quote:

Originally posted by yakimushi
http://www.mozilla.org/products/firefox/

'Nuff said.

Charlatan · 06-29-2004, 06:51 AM

I just loaded Opera browser onto my computer...

macsrule · 07-08-2004, 10:44 AM

Quote:

Originally posted by Lasereth
I'll think about switching from Windows when an OS with wide support is established. Linux and the rest may be awesome, but until I can run the programs I gotta have on those OS's, Windows it is. Now if only companies would start developing more programs and applications for Linux...but I can only imagine how many resources it must take to code a program for two seperate OS'es. Oh well, I guess Microsoft will just keep putting out those updates!

-Lasereth

I always wondered exactly what programs people were talking about that you could not find an alternative on another OS such as Macintosh or Linux.

I swiched to Macintosh in February of this year and have not touched a WinBlows machine (except for at work). I do Interactive Media Design at home, video and audio editing, photo editing, animation, drawing, web design, and others.

viper11885 · 07-08-2004, 12:28 PM

I would love to get a Apple laptop but already have a Windows one. The interface just looks so much nicer and is extremelly pleasant to look at. Have tried a friend's iBook and it was just beautiful. The keyboard was really bad and cheap though but I really liked everything else about it.

06-26-2004, 09:42 AM	#4 (permalink)
oberon Quadrature Amplitude Modulator Location: Denver	How does a firewall help with this sort of problem? __________________ "There are finer fish in the sea than have ever been caught." -- Irish proverb

06-26-2004, 04:37 PM	#6 (permalink)
Lasereth Knight of the Old Republic Location: Winston-Salem, NC	I'll think about switching from Windows when an OS with wide support is established. Linux and the rest may be awesome, but until I can run the programs I gotta have on those OS's, Windows it is. Now if only companies would start developing more programs and applications for Linux...but I can only imagine how many resources it must take to code a program for two seperate OS'es. Oh well, I guess Microsoft will just keep putting out those updates! -Lasereth __________________ "A Darwinian attacks his theory, seeking to find flaws. An ID believer defends his theory, seeking to conceal flaws." -Roger Ebert

06-26-2004, 11:00 PM	#10 (permalink)
brandon11983 Stereophonic Location: Chitown!!	http://www.apple.com/powermac/ 'Nuff said. __________________ Well behaved women rarely make history.

06-28-2004, 08:56 PM	#12 (permalink)
Booboo Insane	Would MyIE2 be considered an alternate browser? __________________ "Your life is yours to live, go out and live it" - Richard Rahl

06-29-2004, 06:51 AM	#15 (permalink)
Charlatan Getting it. Super Moderator Location: Lion City	I just loaded Opera browser onto my computer... __________________ "My hands are on fire. Hands are on fire. Ain't got no more time for all you charlatans and liars." - Old Man Luedecke

06-26-2004, 07:15 AM	#2 (permalink)
Dragonlich 42, baby! Location: The Netherlands	Alternatively, you could still use Windows, and use an alternative browser like the MSNBC story said. That, and use a firewall.

06-26-2004, 08:32 AM	#3 (permalink)
yakimushi Addict	http://www.mozilla.org/products/firefox/ 'Nuff said.

06-26-2004, 05:06 PM	#8 (permalink)
Kurant Junkie Location: Don't worry about it.	Companies won't develop software for a OS they can't charge fees to liscence the software too. Linux is still free source code. Linux in general, you can get for free all over the net. However, I use SuSe and I'd never go back to Windows. Yes, I do have to live without a few things. But the basic things I do on my desktop like gaming and reading boards, general web-surfing. It's flawless. I do use Windows on my laptop however, there is no other way. Linux just doesn't offer enough support to use the things I need.

06-27-2004, 06:23 PM	#11 (permalink)
zero2 Junkie	I haven't been able to make the switch yet from windows to linux. Although I would like to be able to feel more secure, and not have to worry about windows viruses, and os flaws, there isn't a guarantee you won't run into those problems using Linux, Unix, or Mac. All though the likelyhood of getting a virus on those platforms may seem like the likelyhood of getting struck by lightning, the one big thing that has kept me from making the switch is that, software developers are more likely to make a program for windows. Until multi-platform support is widely available...like others here, the only thing I can do is find ways around these things.

07-08-2004, 12:28 PM	#17 (permalink)
viper11885 Insane	I would love to get a Apple laptop but already have a Windows one. The interface just looks so much nicer and is extremelly pleasant to look at. Have tried a friend's iBook and it was just beautiful. The keyboard was really bad and cheap though but I really liked everything else about it.