125 Comments
- troydoogle7, on 10/12/2007, -2/+52It always comes at the same time each year about 3 weeks before the new norton is released
- jsd8cc, on 10/12/2007, -2/+50Set a thumper and RUN
- Blazeix, on 10/12/2007, -3/+29You know, electrosoccertu, I use ubuntu, and I love it. But comments like yours will only make people tired and irritated of hearing about ubuntu. It will probably end up hurting the community more than helping it.
- inactive, on 10/12/2007, -5/+24the worm has already started its on every windows PC , its called WGA
- r0ck3tm4nn, on 10/12/2007, -5/+24You mean I shouldn't open exe files attached to emails from people I don't know? But the prospect of a larger penis was so enticing...
- suomi, on 10/12/2007, -4/+22I think you have a broken '.' key.
- honavery, on 10/12/2007, -2/+18And the award for nerdiest comment of the day goes to....
- CorpT, on 10/12/2007, -1/+16Yet you understood it. ;)
To be fair, if you set a thumper, you shouldn't run. That would be too rhythmic. Maybe a slow, slide shuffle away. - kweee, on 10/12/2007, -5/+19Haha, sucks for all you Windows users. I'm glad I have a PC running Windows!!! Hahahahahaha wait oh *****!
- josegutz, on 10/12/2007, -3/+15This Just in.... The world suddenly has come to a state of total chaos and doom due to the release of a computer worm by an obssesive compulsive idiot who just HAD no other choice but to click on that unsuspected email from someone that they don't even know just becuase they wanted to make their poor excuse of a despicable life more exciting...
I think "Immenent" is a good way to put it. - UncommonSense, on 10/12/2007, -1/+13None of those work. Tried em all, and every time I get the same reaction from women: "Awwww how cute" =o[
- shmatt, on 10/12/2007, -2/+13yeah, but what fellow diggers always seem to forget is that nowadays computers are for everybody, and yes, they should be secure enough for the average idiot to reasonably expect his pc to be safe.
you can say pebkac all you want, but without these folks a lot of us would be without a job. not to mention we all were clueless at some point. - gabeN, on 10/12/2007, -5/+16somebody call Sandra Bullock!
- kubudubudubuntu, on 10/12/2007, -1/+11Linux is the most widely used server OS,, it is way more secure than a windows server,, so please stop those false claims that "It's safe because it's a minority", with being far from qualified from making such a claim.
bye - brentzilla, on 10/12/2007, -0/+9"click on that unsuspected email from someone that they don't even know just becuase they wanted to make their poor excuse of a despicable life more exciting..."
Worms don't require user action to spread. Get the facts straight. - coolspray, on 10/12/2007, -1/+9Ouch. Got my update:
http://www.microsoft.com/downloads/details.aspx?familyid=2996b9b6-03ff-4636-861a-46b3eac7a305&displaylang=en - zigid, on 10/12/2007, -2/+10I'm with Blazeix, I like ubuntu and I use it, but we are all tired of hearing the jabs everytime a Windows bug comes out, we get the idea already, Linux isn't vulnerable to Windows flaws and has far less of them, we know, we don't need to be reminded over and over. . .
- Crypty, on 10/12/2007, -5/+13Believe it or not, the only thing you need to protect yourself is a little bit of common sense.
- technique, on 10/12/2007, -6/+13A deadly worm is coming, and its name is Jim
http://en.wikipedia.org/wiki/Earthworm_Jim - shmatt, on 10/12/2007, -3/+10Ok, parent you asked for that. to the replies, well, ***** you *****. that was a whole bunch anti-mac cliches. I must respond.
I call BS that a hacker isn't interested in exploiting os x. In the real world we've been free of all viruses & worms, that's just the truth. I think being the first one to create anything that is actually a threat to users and their data would be pretty impressive credential. guess what, hasn't happened yet.
as far as Macs are for drawaing pictures? c'mon noone on digg is stupid enough to believe that, unless you truly are a lemming and are uncomfortable with the possibility that your platform isn't 'the best,' as if any single one is.
grow up people. let's keep digg intelligent. i'm a mac-at-home, dell-at-work, wish-i-had-time-for-linux user, I would like to stop the pissing match, who's with me? - tont0r, on 10/12/2007, -4/+11Unfortunately you are falling into the same boat as people did when they said firefox = no more popups. Well duh, same with opera. This is due to the fact that they only had like 2% of the market out there. But now a days, firefox can get pop upsand what not. Fortunately, they do a great job at patching up firefox within a day of the problem getting noticed. But the same thing WILL happen to macs. Im sorry to say, but its going to happen. Once its worth the while of people who write worms, viruses, etc, they will be on the macs.
Mac people get very defensive and Im not downing macs at all. if I had the money to get a mac right now, I would. But the fact remains that once there are enough out there in the market, its going to happen.But please enjoy yourselves until it does happen. - NSMike, on 10/12/2007, -5/+11Your logic is self-defeating.
As Macs become more prevalent, they become bigger targets. In my opinion, all you Mac-lovers should stop preaching about how great Macs are and how they're "not" affected by security issues (even though despite your self-delusion, they are) in order to preserve their small stature in the market. A malicious programmer's first concern is, "How to I do this so it will affect the most people possible?" And after that, I guarantee no malicious programmer has said, "I know! I'll write it for MACS!" - lava, on 10/12/2007, -3/+9isn't that like saying that Indiana is better than NY at counterterrorism?
- MasteRR, on 10/12/2007, -3/+8Now when was the last time you saw a worm actually lessen the traffic on the net? Seems to me it usually "clogs the pipes".
I still constantly get scanned for holes by worms from the pre SP1 days. Some of these infected machines are never cleaned off and just sit on the net scanning everyone in sight.
Good thing I don't have a running Windows box in the house now that I finnaly switched my mom to Ubuntu. She resisted until she actually tried it and finnaly admintted that she likes it. - inactive, on 10/12/2007, -8/+13i need my right mouse button!!!!
- AnGryTreE, on 10/12/2007, -0/+5Didn't Code Red already destroy the entire internet?
Remember that hype from AV companies and traditional media? I'm with JMJimmy, wake me up after the fear mongering and ignorance of old school media is all over with...that will be a long sleep. - Pile, on 10/12/2007, -0/+5According to the vulnerability description (which of course, wasn't on Microsoft's site): The vulnerability is caused due to a boundary error in the Server service during the processing of RPC traffic. This can be exploited to cause a buffer overflow by sending a specially crafted packet to port 139/TCP or 445/TCP.
So if you're behind a Linksys router or something like that, even unpatched, you are probably OK. I also checked and this does not affect Win98/ME. Port 139 has traditionally been a major source of problems and this vulnerability seems to mainly affect morons who a) are running unpatched MS servers, b) have an unpatched client machine hooked straight to the net with an ISP that isn't filtering RPC traffic. This is the same entry point that many of the oldest MS worms used. It's about time it is closed. - JMJimmy, on 10/12/2007, -2/+7Wake me up when the fear mongering is over.
Sure it *may* happen but if it does, you deal, if it doesn't there's no sense worrying now.
If you're smart you have backup systems in place and at most it's a glitch to be delt with. - icetigaurus, on 10/12/2007, -12/+16@ lintrippz
"Security through obscurity is the De Facto motto of OpenBSD."
According to wikipedia: In cryptography and computer security, security through obscurity (sometimes security by obscurity) is a controversial principle in security engineering, which attempts to use secrecy (of design, implementation, etc.) to ensure security.
It isn't security through obscurity if the source code is available for anyone to view... so way to look like a total jerk who doesn't know what he is talking about. - spjmm0, on 10/12/2007, -1/+5Let me get my weirding module!
- Nougat, on 10/12/2007, -1/+5It's a rare occurence these days when systems are exploited through OS flaws. Most exploits occur packaged as 'applications' that an end user must 'install.' Hence, a cautious end user may be led into a false sense of security, because they are 'smart enough' not to open executable email attachments.
Remember when viruses were code attached to regular executables, and not stand-alone apps requiring user intervention to run and install? Ah, those were the days. - bradk50, on 10/12/2007, -7/+10 Sure and try running a fortune 500 company on your atari st...
- suomi, on 10/12/2007, -2/+5i64x
http://www.macworld.com/news/2006/06/21/nx/index.php
Well that is one - you did ask for one - didn't you? I have more.
I think you ought to do a little more research. Any system that can't handle even the simplest batch task of searching, replacing, translating and sorting an ordinary text file, in the way you want, out of the box - then what is the point? That is where the real power is - not megabucks, overpriced commercial software - but empowering users to be able to do things for themselves. - randyandy, on 10/12/2007, -1/+4For those who are more interested. This is the actual Microsoft Advisory.
http://www.microsoft.com/technet/security/bulletin/ms06-040.mspx
A quck analysis shows this is TCP based so a full three way handshake (unlike slammer) is necessary - which is a good thing. Limits the propagation speed. It also needs ports 139 (smb) and 445 which are normally blocked at firewalls and upstream cable companies (at least mine does). So in terms of widespread nastiness, I doubt its efficacy - maybe universities with open firewall policies and the like.
However, THERE IS EXPLOIT CODE IN THE WILD! And its easy to get a hand on it if you know where to look. If you're a Windows user please patch your machine. Some enterprising dude could always come through your home wireless connection if its open or some other entry vector. IMHO no firewall is like no-condom sex.
I for one am supposed to be writing exploits for a class so I guess I can get started early. - mancat, on 10/12/2007, -0/+3Umm.. So when was the last time you ran Windows Update? You've needed to validate for nearly a year now, and once you do it, you never have to do it again. I'm not sure why you say that the description is false; it does exactly what they say it does. Don't get it confused with the "Windows Genuine Advantage Notifier," which is the nagging little tray applet that you hear so much about. If you are just now installing the Windows Installer 3.1 package, I can tell you for a fact that you're probably missing at least 60 security updates that have been released over the past few months.
Of course, the only reason I could really see you being so upset about all of this is if you have a pirated copy of Windows. In that case, either just turn on Automatic Updates in the Control Panel to get security updates without visiting Windows Update, or buy a real copy. - evetsleep, on 10/12/2007, -2/+5/put_on_tinfoil_hat
Think ....DUNE.
/take_tinfoil_hat_off - CorpT, on 10/12/2007, -1/+4If you don't know what a thumper is, go read "Dune" by Frank Herbert. Excellent book. One of my favorites.
I like the David Lynch movie too but they're different. The SciFi mini-series was decent as well although I prefer the movie. I'm in a pretty small minority though. - john2kx, on 10/12/2007, -3/+6This only concerns people who haven't installed the patch released by MS on Tuesday.
This isn't like some unanswered, unavoidable disaster that they make it seem. - merr, on 10/12/2007, -5/+8Disclaimer: I use a Mac
Owning a Mac doesn't mean your virus problems will be over. It's ridiculous to believe that any operating system can be 100% free of vulnerabilities. If you didn't write and test every line of code yourself, you can't make that claim. It's *much less likely* that you'll get a virus running OSX or Linux (for now). Please don't make outrageous claims. - Nightfall, on 10/12/2007, -1/+3Pile:
It still doesn't change the fact that any computer user should know the basics on maintaining it. Even my parents who are not tech savvy can go to windowsupdate or set their systems up to automatically update their systems while they are away. So what is the excuse of all the windows users who don't update their systems? What about the Firefox users who don't check for updates or decline to update their browsers? I could go on and on, but you should get the point.
You are right on my oil change analogy, it wasn't the right one to use. Its hard for me to find a real world comparison to keeping a system updated. Maybe because its common sense to me. :)
However, it isn't rocket science to keep a windows computer maintained. - sadistical, on 10/12/2007, -1/+3No, not Web 2.0. We are all saved by the wiki.
- BlackCow, on 10/12/2007, -6/+8So uh, hows counter strike for you? Hey what did you put in your rig... oh wait.... you bought a mac... you dident build it...nevermind. Seriously its worth the security threat to be able to build my own system, do everything I can do on a mac AND play video games. Hell, ive never gotten a virus before with windows.
- trollenlord, on 10/12/2007, -0/+2Vista is rarely affected because for instance the network stack is a virgin one - it's a complete re-implementation. It doesn't mean it's more secure however. It has got its own bugs and perhaps a great amount of them. It just isn't viable target until the installation base reaches couple hundred millions - that's when the nasty people start studying it.
- Vermifax, on 10/12/2007, -1/+3The Worm and the Windows are ONE!!!
"Father, the Sleeper has awakened!!!!" - estvir, on 10/12/2007, -0/+2@lintrippz
You took a simple context and made something silly of it.
By my 'secure because of OpenBSD' could've been replaced with FreeBSD, or some Linux distro easily, it's just that I have it configured properly with firewall and other measures in place, I don't know why you had to go off about someone wouldn't write a virus for OpenBSD blah blah.
And they don't simply rely on 'security through obscurity' - every piece of code which goes into OpenBSD has quite a rigid check and so on. - Yoshi39, on 10/12/2007, -2/+4What is a thumper?
- Pile, on 10/12/2007, -1/+3No, Win98/ME is not vulnerable.
- kurupt, on 10/12/2007, -0/+2I didn't want to bother wasting my time on your post but...I just sincerely hope that nobody here would actually fall for this.
@ "i used the sdbot source code for the patchin capabilities"
And what prey tell might those "patchin capabilities" be?
Avast - Found Win32:SdBot-3223
AVG Antivirus - Found IRC/BackDoor.SdBot
BitDefender - Found Backdoor.SDBot.E072CC05
ClamAV - Found Trojan.SdBot.Gen-27
Dr.Web - Found BackDoor.IRC.Sdbot.based
F-Prot Antivirus - Found Possibly a new variant of W32/IRCBot-based!Maximus
Fortinet - Found W32/SDBot.1!worm
Kaspersky Anti-Virus - Found Backdoor.Win32.SdBot.gen
NOD32 - Found a variant of IRC/SdBot
Opening up a backdoor to allow access to another users system is supposed to help prevent this upcoming worm attack? o_O? - johngault, on 10/12/2007, -0/+2yea odd, kinda like M$oft "high priority updates" which turned into "genuine advantage" updates.
- inactive, on 10/12/2007, -0/+2Why is everyone digging down anyone who uses Linux?
Ah well, once the worm hits them, they won't be any digging whatsoever. -
Show 51 - 100 of 123 discussions



What is Digg?
Digg is coming to a city (and computer) near you! Check out all the details on our