Microsoft Security System Flame Bug Advisory and Update

Microsoft has released a security advisory relating to the flame virus. It has also provided an update for all supported releases of Microsoft Windows. The update revokes the trust of the following intermediate CA certificates.

Microsoft Enforced Licensing Intermediate PCA (2 certificates)
Microsoft Enforced Licensing Registration Authority CA (SHA1)

yahoo.com

The cyber espionage super bug Flame compromised a key Microsoft security system, the company has now revealed, prompting Microsoft to issue an emergency patch to its millions of customers because of fears of what one expert called potential "collateral damage" from the U.S. and Israel's cyber war against Iran.

reply to post by Daedal


Thanks for that

Not updating is the main cause of these things spreading imo.

Has anyone downloaded this update, what if it is the bug... just kidding...

Microsoft are Nazi's and I don't trust them one bit. Being a customer for the past 15 years, I have personally seen how bad they can screw you. They are masters of planned obsolescence. They are masters of spacing their product releases to make the most possible money, no doubt in collaboration with Sony. And there whole company started with a thief.

So I personally don't trust a word of what Microsoft says. Though this could be exactly as it seems, there could also be a more.... nefarious purpose. Just saying.

reply to post by Daedal

So Microsoft "dropped" a certificate that someone with access to specialised industrial equipment (nuclear enrichment equipment) needed to slip their virus under the radar? This just gets better and better.

ETA In plainer English, the Microsoft update will remove support for a now compromised security certificate. This certificate could enable a piece of software to be "signed" trustworthy and windows would install it without question. As it is new, a virus scanner would find nothing (speaking about the original attack, now there is probably a signature for Flame in most virus scanner). This was a very well-planned attack by...

I just tried updating and nothing new appeared in the list so either I've already got the update or I dunno...

Originally posted by VoidHawk
I just tried updating and nothing new appeared in the list so either I've already got the update or I dunno...

You can check your recent history to verify if you recieved the update or not, there should be a link on the right side if you open up your windows updates. Just look for the number in the advisory which will indicate whether or not it has been installed.

I had an update this afternoon.

So... Microsoft really said US and Israel were having a cyber war against Iran?...

Havent used Windows in about 8 years now. Does this have an effect on Linux?? I guess as long as it doesnt attack a vulnerability than I should be good to go.

As far as I'm concerned, nothing can screw your pc faster than a Microsoft update , I've been there. I run an windows XP dark edition, a normal antivirus, never use IE or Outlook mail, never updated and never had problems with it. I would happily go with linux, but I need some windows dependent software. Thinking that windows updates can protect me from anything it just make me laugh...

reply to post by WhiteHat


15 years ago I would have agreed with you.
I use XP slipstreamed SP3. Do my updates manualy and never get a problem.

reply to post by VoidHawk


slipstreamed

u said

slipstreamed,,,,

im not alone ,, Bob

reply to post by BobAthome


Its the only way to go