EverCrest Message Forums
You are not logged in. Login or Register.
Author
Topic: XP Users -- Read this
Drysart
Pancake
posted 12-20-2001 04:29:13 PM
You need to install this security patch immediately:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=34951
/dev/null
Pancake
posted 12-20-2001 04:32:04 PM
*cough*

Superior?

Beep. Beep. Beep... Ohh... I think my porridge is done.
My fellow Americans, as you know, my foreign policy can be summed up in five words: "Iludium-236 Explosive Space Modulator."
When it comes down to it, searching the web without Google is like straining sewage with your teeth.
Drysart
Pancake
posted 12-20-2001 04:39:31 PM
quote:
Check out the big brain on RPC!
*cough*

Superior?


Show me an OS that hasn't had its share of security holes.

Sarudani Miolnir
Old-school poster
posted 12-20-2001 04:48:47 PM
From the bulliten referenced on that page, 98,98SE, ME and XP are all vulnerable.

Sar...

/dev/null
Pancake
posted 12-20-2001 04:51:08 PM
quote:
Drysart had this to say about Captain Planet:
Show me an OS that hasn't had its share of security holes.

But a hole that someone REMOTELY can abuse Plug'n'Play? Common....

And why isn't Win2k afflicted with this?

Beep. Beep. Beep... Ohh... I think my porridge is done.
My fellow Americans, as you know, my foreign policy can be summed up in five words: "Iludium-236 Explosive Space Modulator."
When it comes down to it, searching the web without Google is like straining sewage with your teeth.
Drysart
Pancake
posted 12-20-2001 04:51:11 PM
98, 98SE, and ME are only vulnerable if you've installed a set of utilities for network compatibility with XP.
Kinanik
Upset about being titless
posted 12-20-2001 04:54:27 PM
Thank you
Gully Foyle is my name
And Terra is my nation
Deep space is my dwelling place
The stars my destination
Drysart
Pancake
posted 12-20-2001 04:54:45 PM
quote:
RPC had this to say about Reading Rainbow:
But a hole that someone REMOTELY can abuse Plug'n'Play? Common....

How is that any less absurd than someone REMOTELY abusing Telnet through a buffer overflow? Or someone REMOTELY exploiting a race condition in the kernel with setuid to gain root? Or someone REMOTELY exploiting an FTP server? Or someone REMOTELY exploiting an SSH server? Or someone REMOTELY exploiting a DNS server?

No OS is free of this sort of problem.

quote:
RPC had this to say about Reading Rainbow:
And why isn't Win2k afflicted with this?

Win2k doesn't have the ability to automatically discover new Plug and Play devices on the local network (so, for example, you can use the printer you just plugged into the network). You have to set those up manually in 2K, usually with a driver disk provided by the manufacturer.

[ 12-20-2001: Message edited by: Drysart ]

/dev/null
Pancake
posted 12-20-2001 05:00:07 PM
quote:
And I was all like 'Oh yeah?' and Drysart was all like:
How is that any less absurd than someone REMOTELY abusing Telnet through a buffer overflow? Or someone exploiting a race condition in the kernel with setuid to gain root?

Telnet is meant to be used remotely and would be expected to deal with issues like this.

Most kernel race condition exploits require local console access on the box to exploit. The few that don't still require you to already have remote access to the box (which you can still gain from an exploit such as the above stated telnet) which, again, should be a potential expection.

The idea of Plug'n'Pray network devices is kinda loony, IMHO. Just because someone flipped a switch on a box on the LAN I'm expected to stop what I'm doing while my machine loads drivers for something? To whom does that make sense?


quote:
And I was all like 'Oh yeah?' and Drysart was all like:
Win2k doesn't have the ability to automatically discover new Plug and Play devices on the local network. You have to do it manually in 2K.

Imagine that... the feature's not needed and there's nothing to break....

Beep. Beep. Beep... Ohh... I think my porridge is done.
My fellow Americans, as you know, my foreign policy can be summed up in five words: "Iludium-236 Explosive Space Modulator."
When it comes down to it, searching the web without Google is like straining sewage with your teeth.
/dev/null
Pancake
posted 12-20-2001 05:01:42 PM
quote:
Drysart impressed everyone with:
How is that any less absurd than someone REMOTELY abusing Telnet through a buffer overflow? Or someone REMOTELY exploiting a race condition in the kernel with setuid to gain root? Or someone REMOTELY exploiting an FTP server? Or someone REMOTELY exploiting an SSH server? Or someone REMOTELY exploiting a DNS server?

No OS is free of this sort of problem



quote:
Drysart impressed everyone with:
[ 12-20-2001: Message edited by: Drysart ]

Hit a few sites to look up the recent exploit binge? heheh

[ 12-20-2001: Message edited by: RPC ]

Beep. Beep. Beep... Ohh... I think my porridge is done.
My fellow Americans, as you know, my foreign policy can be summed up in five words: "Iludium-236 Explosive Space Modulator."
When it comes down to it, searching the web without Google is like straining sewage with your teeth.
DarkDragoon
Pancake
posted 12-20-2001 05:05:51 PM
Ooh Ooh!!! I got a stupid question, where do you download those utilities for network compatibility? got one of my comps on xp and another not, and its getting on my nerves that they won't network.
"What is Light without Darkness?"
"And to think I could kill every man, woman, and child here if I wanted to. The power of death is intoxicating"
Shadow Knight of Tarew Marr
Eternal Lurker of the Boards.
Drysart
Pancake
posted 12-20-2001 05:05:58 PM
quote:
RPC impressed everyone with:
The idea of Plug'n'Pray network devices is kinda loony, IMHO. Just because someone flipped a switch on a box on the LAN I'm expected to stop what I'm doing while my machine loads drivers for something? To whom does that make sense?

You don't have to stop what you're doing, it happens transparently. That's the whole point of it. Users don't even notice it.

quote:
RPC impressed everyone with:
Imagine that... the feature's not needed and there's nothing to break....

If you've ever worked on a medium-to-large sized network with dedicated network printers, scanners, etc., you'd realize how immensely useful this feature is, and almost certainly it will come into usefulness in a home environment in the near future as home LANs become more pervasive.

Either install the printer/scanner/etc and everyone can use it automagically, or install it, then take the driver disk around to all 20, 200, or 2000 workstations and install the software on each of them individually, not to mention having to deal with reinstalling those drivers each time the OS needs to be upgraded or reinstalled or whathaveyou.

What would you prefer as an already overworked netadmin?

Delphi Aegis
Pancake
posted 12-20-2001 05:10:30 PM
Drysart > RPC

That is all.

Delphi
I walk in the Light
Facing the Darkness Boldly
I fear no Evil
Drysart
Pancake
posted 12-20-2001 05:16:23 PM
quote:
DarkDragoon impressed everyone with:
Ooh Ooh!!! I got a stupid question, where do you download those utilities for network compatibility? got one of my comps on xp and another not, and its getting on my nerves that they won't network.

They're not for general networking, they're for special purpose device sharing and such... for the network-based printers and scanners I mentioned earlier. Most likely you don't need them, not for a general TCP/IP connection anyway.

/dev/null
Pancake
posted 12-20-2001 05:16:25 PM
quote:
Drysart had this to say about Duck Tales:
If you've ever worked on a medium-to-large sized network with dedicated network printers, scanners, etc., you'd realize how immensely useful this feature is, and almost certainly it will come into usefulness in a home environment in the near future as home LANs become more pervasive.

Either install the printer/scanner/etc and everyone can use it automagically, or install it, then take the driver disk around to all 20, 200, or 2000 workstations and install the software on each of them individually, not to mention having to deal with reinstalling those drivers each time the OS needs to be upgraded or reinstalled or whathaveyou.

What would you prefer as an already overworked netadmin?


Network Scanner? How in the hell does that work? Last I checked scanners were hooked up to single machines and people had to put pictures and stuff on the by hand...

As for the printer, being in a relatively decent sized company it's not that big a deal from what I've seen. The imaged units that are given to most carbon blobs that come to work here already have all the drivers for all the printers loaded. The end (l)user then hits the print server via "Not-Work" Neighborhood and selects the printer closest to them (they're all labled for building, floor and the side of the floor they're on). Since the drivers are 'pre-loaded', there are very few issues. Deviating from the COE platform is a terminable offence, and in recent weeks has been on the increase.

It's the P^6 rule that was beaten into my head.... "Prior Proper Planning Prevents Poor Performance". Granted this isn't always possible. I'm sure the folks who got machines 3 or 4 years ago and haven't been given upgrades since then would find it hard to use the new HP 8000 that was installed. However the list of problems has been cut from the possible 750 for this office alone (not counting outside offices printing to her for whatever reason) to a more managable 50 or 60 (this is assuming that people follow the rules and don't print to printers not on their floor.. I can't cover human stupidity)

Beep. Beep. Beep... Ohh... I think my porridge is done.
My fellow Americans, as you know, my foreign policy can be summed up in five words: "Iludium-236 Explosive Space Modulator."
When it comes down to it, searching the web without Google is like straining sewage with your teeth.
Rowyl
Pancake
posted 12-20-2001 05:19:11 PM
Yes RPC, Windows XP is Superior.

Simple as that.

-Rowyl
DarkDragoon
Pancake
posted 12-20-2001 05:23:33 PM
Hmm, ahhh thanks. was kinda hoping for a quick and easy solution like that but guess i'll just have to go back to trying different things with them.
"What is Light without Darkness?"
"And to think I could kill every man, woman, and child here if I wanted to. The power of death is intoxicating"
Shadow Knight of Tarew Marr
Eternal Lurker of the Boards.
Drysart
Pancake
posted 12-20-2001 05:25:11 PM
quote:
RPC had this to say about John Romero:
Network Scanner? How in the hell does that work? Last I checked scanners were hooked up to single machines and people had to put pictures and stuff on the by hand...

High end scanners used by professionals often plug directly into Ethernet instead of to a specific machine. Look at the top image in the left column here for an example of the type of thing I'm talking about.

quote:
RPC had this to say about John Romero:
As for the printer, being in a relatively decent sized company it's not that big a deal from what I've seen. The imaged units that are given to most carbon blobs that come to work here already have all the drivers for all the printers loaded.

As opposed to it being done automatically by the OS.

When one of those printers gets upgraded, you have to go around and upgrade drivers on all the machines in that printer's sphere of influence, yes, otherwise they'd have the same sort of problems that you described they have when they try to print to a printer that's not "theirs"? That's what I'm referring to.

Fippy
I am da law!
posted 12-20-2001 05:33:34 PM
I'll join Dry's company if he is netadmin/MIS. Anyone who makes life easier for himself has smarts
baaaaarrrrrks,
Fippy.
/dev/null
Pancake
posted 12-20-2001 05:48:54 PM
quote:
Drysart had this to say about (_|_):
As opposed to it being done automatically by the OS.

When one of those printers gets upgraded, you have to go around and upgrade drivers on all the machines in that printer's sphere of influence, yes, otherwise they'd have the same sort of problems that you described they have when they try to print to a printer that's not "theirs"? That's what I'm referring to.


Upgrade? What's this 'Upgrade' you speak of?

You have to realize, I'm dealing with a company that's still using WinNT for everything they possibly can. The printers get upgraded with RAM and that's about it. I'm printing to a HP5Si currently... There are HP4's and 3's in some areas. Hell, untill I begged and screamed they left me on a PII 233 with 64Mb. With the current software load I can have Outlook and the call logging software open on 128Mb and that's about it. I can open a web browser without swapping *if* I don't hit any flash or similar crap. (Thank god I traded out that maching for a 256mb box)

As far as ease of use, it would be nice *IF* it is indeed totally transparent. I've heard that from the mighty M$ before, and things were anything but transparent.....

Beep. Beep. Beep... Ohh... I think my porridge is done.
My fellow Americans, as you know, my foreign policy can be summed up in five words: "Iludium-236 Explosive Space Modulator."
When it comes down to it, searching the web without Google is like straining sewage with your teeth.
/dev/null
Pancake
posted 12-20-2001 05:49:32 PM
quote:
Rowyl had this to say about Punky Brewster:
Yes RPC, Windows XP is Superior.

Simple as that.


Shoosh you hairy-footed freak... I'm taunting Drysart.

Beep. Beep. Beep... Ohh... I think my porridge is done.
My fellow Americans, as you know, my foreign policy can be summed up in five words: "Iludium-236 Explosive Space Modulator."
When it comes down to it, searching the web without Google is like straining sewage with your teeth.
Maradon!
posted 12-20-2001 08:11:55 PM
quote:
Rowyl had this to say about Jimmy Carter:
Yes RPC, Windows XP is Superior.

Simple as that.


My sentiments preciesly.

Oh, by the way;

sorry, couldn't resist

[ 12-20-2001: Message edited by: Maradön? ]

Random Insanity Generator
Condom Ninja El Supremo
posted 12-20-2001 08:49:10 PM
quote:
Maradön? had this to say about Captain Planet:
My sentiments preciesly.

Oh, by the way;

sorry, couldn't resist


Lemme know when your system overcomes the bloat of useless features that you don't use and probally don't need.

I can't consider it a good upgrade when the system runs up to 25% slower because of 'extras'... especially ones I can't disable/unload....

* NullDevice kicks the server. "Floggings will continue until processing power improves!"
-----------------------------------
"That was black magic, and it was easy to use. Easy and fun. Like Legos." -- Harry Dresden
-----------------------------------
That's what playing Ragnarok Online taught me: There's no problem in the universe that can't be resolved by the proper application of daggers to faces.
All times are US/Eastern
Hop To: