ITinfo: Microsoft Assures FBI Windows Can Be Secured

Windows Users Urged To Patch

Four versions of Windows affected

ITINFO Sponsor

Professional Training Certification

Certification means more business.
Vendor-neutral certification means credibility.

If you're a trainer or an author of training materials, see if you've got the right stuff.

Get certified today.

Internet Poll

Have you attended a seminar via e-learning?

	yes
	no
poll archive

Microsoft Assures FBI Windows Can Be Secured

by Dave Murphy
ISSN 1535-3613

The U.S. Federal Bureau of Investigation (FBI), U.S. Defense Department, and top industry experts talked with Microsoft Corp. executives yesterday to seek assurance that free software fix to Windows 98, Windows Me and Windows XP will prevent hackers from exploiting major flaws in the popular operating systems. Microsoft's experts openly acknowledged the threats posed by the Windows XP problems, but they assured federal officials and industry experts that its fix - if installed by consumers - resolves the issues.

The government's interest demonstrates the level of concern that's present regarding attacks that could be initiated against Internet resources and our electronic infrastructure, until the software patch was released. The meetings were initiated by the FBI's National Infrastructure Protection Center (NIPC), its top cyber-security unit.

Windows XP, Windows 98 and Windows Me, according to Microsoft's security site, suffer from serious problems that allow hackers to remotely steal or destroy a victim's data files when the victim's computer accesses the Internet.

Dave's Opinion

The security flaw arises from an unchecked buffer compromise that affects the Universal Plug and Play system of the operation systems. Users of Windows Me or Windows XP, as well as users of Windows XP Internet Connection Sharing client on Windows 98 or Windows 98SE (Second Edition) are at risk of the security vulnerability.

Microsoft's site uses the following words in describing who should install the patch: "Microsoft strongly urges all Windows XP customers to apply the patch immediately. Customers using Windows 98, 98SE or Me should apply the patch if the Universal Plug and Play service is installed and running." I don't recall ever reading that Microsoft "strongly urging" users to quickly install patches. This security flaw must really be serious.

Check below for a link to Microsoft's security site which prominently displays a hyperlink to the free patch download.

Call for Comments

What do you think? Leave your comments on the message center.

References

Microsoft Security Center
Message Center

Damar Group, Ltd. helps business use technology.

ITINFO is again accepting sponsors. Sponsor messages are included in ITINFO's email newsletter and are permanently posted to DGL's website and online reference areas.

ITINFO is an electronic publication of Damar Group, Ltd., publisher of Training Express computer learning guides. Comments and submissions to info@dgl.com.

Previous issues are on our website at http://dgl.com/itinfo/.

updated December 21, 2001
http://dgl.com/itinfo/2001/it011221.html