Overclock.net - Overclocking.net
     
 
Home Gallery Reviews Blogs Register Today's Posts Mark Forums Read Members List


Go Back   Overclock.net - Overclocking.net > Industry News > Software News

Reply
 
LinkBack Thread Tools
Old 08-08-08   #1 (permalink)
Audiophile
 
Sparhawk's Avatar
 
amd ati

Join Date: Aug 2007
Location: Calgary, AB
Posts: 758

Rep: 49 Sparhawk is acknowledged by some
Unique Rep: 43
Folding Team Rank: 317
Hardware Reviews: 3
Trader Rating: 0
Default [Neowin] Vista's Security "Completely Game Over"

Quote:
Mark Dowd of IBM Internet Security Systems (ISS) and Alexander Sotirov, of VMware Inc. have discovered a technique that can be used to bypass all memory protection safeguards that Microsoft built into Windows Vista. These new methods have been used to get around Vista's Address Space Layout Randomization (ASLR), Data Execution Prevention (DEP) and other protections by loading malicious content through an active web browser. The researchers were able to load whatever content they wanted into any location they wished on a user's machine using a variety of scripting languages, such as Java, ActiveX and even .NET objects. This feat was achieved by taking advantage of the way that Internet Explorer (and other browsers) handle active scripting in the Operating System.

While this may seem like any standard security hole, other researchers say that the work is a major breakthrough and there is very little that Microsoft can do to fix the problems. These attacks work differently than other security exploits, as they aren't based on any new Windows vulnerabilities, but instead take advantage of the way Microsoft chose to guard Vista's fundamental architecture. According to Dino Dai Zovi, a popular security researcher, "the genius of this is that it's completely reusable. They have attacks that let them load chosen content to a chosen location with chosen permissions. That's completely game over."
Quote:
It currently isn't known whether these exploits can be used against older Microsoft Operating Systems, such as Windows XP and Windows Server 2003, but since these techniques do not rely on any one specific vulnerability, Zovi believes that we may suddenly see many similar techniques applied to other platforms or environments.
Read more about it here.

Kinda scary, hope they release a patch

http://www.neowin.net/news/main/08/0...by-new-exploit
Sorry the link loads really slowly
__________________
Give Folding a try and help a great cause HERE

{Completed Worklog} Wooden HTPC Table - My first real mod!

[Completed Worklog]Armor Aesthetics Modification(aka side-panel Dremel engraving)

I am 99% addicted to Team Fortress 2
Quote:
<looks at smoking PSU>... I think the game exceeded the awesomeness threshold of your capacitors.

System: HotThunder
CPU
X2 5000+ Black Edition @ 3.2 GHz & 1.415V
Motherboard
MSI K9A2 Platinum
Memory
4x1GB Mushkin (996533)
Graphics Card
VisionTek Radeon HD4850
Hard Drive
2x320GB(raid0) & 3x320GB + (320GB & 500GB backup)
Sound Card
Auzentech X-Fi Prelude 7.1
Power Supply
Corsair TX750, Back-UPS XS1300
Case
Thermaltake Armor
CPU cooling
Zalman CNPS9500 AM2(lapped)
GPU cooling
Stock
OS
Vista Ultimate x64, XP Pro
Monitor
24" Samsung 2443BW LCD

Last edited by Sparhawk : 08-08-08 at 10:25 AM.
Sparhawk is offline I fold for Overclock.net   Reply With Quote
Old 08-08-08   #2 (permalink)
Overclocker
 
Psycho666's Avatar
 
intel ati

Join Date: Nov 2007
Location: Rotterdam
Posts: 951

Rep: 60 Psycho666 is acknowledged by some
Unique Rep: 45
Folding Team Rank: 162
Trader Rating: 0
Default

thank god i`m using Ubuntu 8.04 more than Vista
__________________
Xbox360 Gamertag = PsYch0666
HD 3870 : 1066/1359
19012 @ 3mark06
The HD3800 Club

System: P$ych0t!c Br34kd0\/\/n
CPU
Q9550 @ 4Ghz
Motherboard
Asus Maximus II Formula
Memory
2x2Gb 1066Mhz Mushkin Redline
Graphics Card
HD3870x2 + HD3870
Hard Drive
2x 500Gb WD + Samsung 750Gb
Sound Card
Asus SupremeFX X-Fi
Power Supply
ThermalTake 700W 140mm CM
Case
Antec 1200
CPU cooling
Dtek Fuzion with Quad Nozzle
GPU cooling
Stock
OS
Vista Ultimate x64 Sp2 & Ubuntu 8.10 x64
Monitor
Samsung 206BW
Psycho666 is offline I fold for Overclock.net Psycho666's Gallery   Reply With Quote
Old 08-08-08   #3 (permalink)
PC Gamer
 
Playapplepie's Avatar
 
amd nvidia

Join Date: Dec 2007
Location: Gainesville, Fl
Posts: 590

Rep: 8 Playapplepie Unknown
Unique Rep: 8
Hardware Reviews: 3
Trader Rating: 0
Default

Crap now I'm wishing I didn't read this.
__________________
Go Gators!

Epic 8500GT
Quote:
Originally Posted by Ducky View Post
Very simple. First you gotta lube up to ensure easy entrance, then you gotta slowly insert it. After its in, it's generally a good idea to slide it in and out a few times for maximum performance, keep going until you get what you want. Then finally you gotta pull it out, clean up the mess, and put it away.
And that is how they taught me to unclog pipes when plumbing

System: Swamplog
CPU
AMD 64 X2 4200+ @ 2.5Ghz
Motherboard
Biostar TF7025-M2
Memory
2x1Gb DDR2 5-5-5-15
Graphics Card
8500GT 512mb [750/900/1800]
Hard Drive
Seagate Barracuda 250gb
Sound Card
Realtek HD Audio Int.
Power Supply
Enermax 350W
CPU cooling
Thermaltake RubyOrb
GPU cooling
Stock heatsink modded w/ fan
OS
Vista Business x64 SP1
Monitor
ViewSonic 19" LCD
Playapplepie is offline   Reply With Quote
Old 08-08-08   #4 (permalink)
DuckieHo's cheerleader
 
RonindeBeatrice's Avatar
 
intel ati

Join Date: Mar 2006
Location: Virginia, USA
Posts: 5,750
Blog Entries: 1

Rep: 408 RonindeBeatrice is a proven memberRonindeBeatrice is a proven memberRonindeBeatrice is a proven memberRonindeBeatrice is a proven memberRonindeBeatrice is a proven member
Unique Rep: 302
FAQs Submitted: 1
Folding Team Rank: 76
Trader Rating: 37
Default

Quote:
Originally Posted by Playapplepie View Post
Crap now I'm wishing I didn't read this.
"People with guns have bullets that can hurt you; stay in the house: News at 11"

System: Killer
CPU
Intel Xeon X3220
Motherboard
DFI LP Jr. P45 T2RS
Memory
4 GB G.Skill Pi 8800
Graphics Card
HIS Radeon HD3870
Hard Drive
(2) WD 640GB AAKS
Power Supply
Enermax Infiniti 720
Case
SilverStone Sugo 3
CPU cooling
Fuzion V.2, Magicool 240mm, DDC3.2
GPU cooling
VF-1000
OS
Vista Ultimate
RonindeBeatrice is offline I fold for Overclock.net Overclocked Account   Reply With Quote
Old 08-08-08   #5 (permalink)
Folding Fanatic
 
AMD+nVidia's Avatar
 
intel nvidia

Join Date: Apr 2006
Location: My Room
Posts: 3,186

Rep: 127 AMD+nVidia is acknowledged by manyAMD+nVidia is acknowledged by many
Unique Rep: 97
Folding Team Rank: 45
Trader Rating: 9
Default

So it's a problem with INTERNET EXPLORER. And ActiveX! NOT Vista!
__________________
Quote:
Originally Posted by Keatonus View Post
Back on topic, that's interesting...I'm not too sure how you can be bankrupt as a media player...must be a pretty pathetic businessman.
I did Latty's Linux Challenge and I now hate Linux!

System: I has Blu-Ray!!!
CPU
Core 2 Quad Q6700 (3.76GHz)
Motherboard
ASUS Maximus Formula X38
Memory
6GB Dual Channel PC6400 5-4-4-12 (800MHz)
Graphics Card
ASUS 8800GTX 600/1400/2000
Hard Drive
400GB Main 250GB Backup
Sound Card
Modded Creative X-Fi XtremeMusic
Power Supply
X-Power 500w Blue
Case
Cooler Master Cosmos 1000 (Modded)
CPU cooling
Custom V6 Stinger *Lapped*
GPU cooling
Stock
OS
Windows Vista Ultimate x64
Monitor
I-INC 28" HDMI 1920x1200
AMD+nVidia is offline I fold for Overclock.net   Reply With Quote
Old 08-08-08   #6 (permalink)
PC Gamer
 
Mach 5's Avatar
 
intel nvidia

Join Date: Jul 2007
Location: UK
Posts: 59

Rep: 0 Mach 5 Unknown
Unique Rep: 0
Trader Rating: 0
Default

Quote:
Originally Posted by AMD+nVidia View Post
So it's a problem with INTERNET EXPLORER. And ActiveX! NOT Vista!

Read the damn article before flapping your lips.

If there is the possibility that this could be used against older versions of windows, why the hell would they make it public....
__________________
System: My System
CPU
Q6600
Motherboard
Asus P5N32 SLi Premium`
Memory
2GB OCZ Platinum Rev 2.0 800 MHz
Graphics Card
EVGA 8800GTX KO Edition
Power Supply
OCZ stealth 600w
CPU cooling
Thermalright 120 ultra + Sythe 1600RPM
GPU cooling
Stock
OS
Windows XP Pro
Mach 5 is offline   Reply With Quote
Old 08-08-08   #7 (permalink)
nVidia Enthusiast
 
amd ati

Join Date: Jan 2006
Location: Ontario
Posts: 2,120

Rep: 120 Peroxide is acknowledged by manyPeroxide is acknowledged by many
Unique Rep: 101
Folding Team Rank: 883
Trader Rating: 6
Default

Quote:
Originally Posted by AMD+nVidia View Post
So it's a problem with INTERNET EXPLORER. And ActiveX! NOT Vista!
What?

The problem is the way Vista handles Internet Explorer and ActiveX seeing that this only works on Vista, so I think that would put Vista at fault.
__________________
System: Excavation
CPU
AMD Athlon XP 2400+
Motherboard
MSI KM4M-L
Memory
384mb
Graphics Card
9600 SE
Hard Drive
200GB/20GB/20GB
Sound Card
Onboard junk
Power Supply
Some case inc. PSU
Case
Some generic junk
OS
Windows XP
Monitor
17&quot; KDS Visual Sensation
Peroxide is online now I fold for Overclock.net   Reply With Quote
Old 08-08-08   #8 (permalink)
PC Gamer
 
Mach 5's Avatar
 
intel nvidia

Join Date: Jul 2007
Location: UK
Posts: 59

Rep: 0 Mach 5 Unknown
Unique Rep: 0
Trader Rating: 0
Default

The article also mentions that other browsers could be used in the same way, how hard is it to read the whole thing before running your mouth off?
__________________
System: My System
CPU
Q6600
Motherboard
Asus P5N32 SLi Premium`
Memory
2GB OCZ Platinum Rev 2.0 800 MHz
Graphics Card
EVGA 8800GTX KO Edition
Power Supply
OCZ stealth 600w
CPU cooling
Thermalright 120 ultra + Sythe 1600RPM
GPU cooling
Stock
OS
Windows XP Pro
Mach 5 is offline   Reply With Quote
Old 08-08-08   #9 (permalink)
PC Gamer
 
shiarua's Avatar
 
intel nvidia

Join Date: Feb 2006
Location: Milwaukee, WI
Posts: 710

Rep: 88 shiarua is acknowledged by some
Unique Rep: 78
Trader Rating: 0
Default

So what... I'll just reformat if I get infected anyways!
__________________
Future Upgrades:
Sound: Auzentech X-Fi Prelude -> Yamaha RX-V663BL
Speakers: PolkAudio TSi500 (Front x2), PolkAudio TSi200 (Rear x2),
PolkAudio CS20 (Center), PolkAudio PSW110 (Sub)
Headphones:Sennheiser HD555
Xfire

System: shiarua//Gaming.Build#02
CPU
Intel C2Q Q6600 @3.6GHz (400x9) 1.425v
Motherboard
Gigabyte GA-P35-DS3P 1600FSB
Memory
4GB G.Skill HZ @1000MHz 5-5-5-15 2.1v
Graphics Card
BFG GeForce 8800GTX OC 600/1400/1800
Hard Drive
2x160GB WD CaviarSE RAID0/1x250GB WD CaviarSE
Sound Card
Auzentech X-Fi Prelude/Yamaha RX-V663BL
Power Supply
Corsair HX620W Modular
Case
CoolerMaster 690
CPU cooling
Thermalright Ultra-120 Extreme *lapped*
GPU cooling
Stock
OS
Windows Vista Ultimate x64
Monitor
Samsung 2493HM/ViewSonic VX2025wm
shiarua is offline   Reply With Quote
Old 08-08-08   #10 (permalink)
Audiophile
 
Sparhawk's Avatar
 
amd ati

Join Date: Aug 2007
Location: Calgary, AB
Posts: 758

Rep: 49 Sparhawk is acknowledged by some
Unique Rep: 43
Folding Team Rank: 317
Hardware Reviews: 3
Trader Rating: 0
Default

updated main post
__________________
Give Folding a try and help a great cause HERE

{Completed Worklog} Wooden HTPC Table - My first real mod!

[Completed Worklog]Armor Aesthetics Modification(aka side-panel Dremel engraving)

I am 99% addicted to Team Fortress 2
Quote:
<looks at smoking PSU>... I think the game exceeded the awesomeness threshold of your capacitors.

System: HotThunder
CPU
X2 5000+ Black Edition @ 3.2 GHz & 1.415V
Motherboard
MSI K9A2 Platinum
Memory
4x1GB Mushkin (996533)
Graphics Card
VisionTek Radeon HD4850
Hard Drive
2x320GB(raid0) & 3x320GB + (320GB & 500GB backup)
Sound Card
Auzentech X-Fi Prelude 7.1
Power Supply
Corsair TX750, Back-UPS XS1300
Case
Thermaltake Armor
CPU cooling
Zalman CNPS9500 AM2(lapped)
GPU cooling
Stock
OS
Vista Ultimate x64, XP Pro
Monitor
24" Samsung 2443BW LCD
Sparhawk is offline I fold for Overclock.net   Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools



All times are GMT -4. The time now is 03:23 PM.


Overclock.net is a Carbon Neutral Site Creative Commons License Internet Security By ControlScan

Terms of Service / Forum Rules | Privacy Policy | Advertising | Become an Official Vendor
Copyright © 2008 Shogun Interactive Development. Most rights reserved.
Page generated in 0.34221 seconds with 8 queries