republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Critical VMWare bug lets attackers zap "real" Windows
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Security Software Updates 22 Mar 2008 »
« help How to fix the header of your i.e.  
AuthorAll Replies

Mele20
Premium
join:2001-06-05
Hilo, HI

reply to Grail Knight
Re: Critical VMWare bug lets attackers zap "real" Windows

said by Grail Knight See Profile :

quote:
I mention this because I really don't appreciate some security group looking for publicity making this public before VMWare had a patch.
Maybe you should read the Additional Information at the bottom of this page before you criticize Core Security.

»www.coresecurity.com/?action=item&id=2129:

The dates are what you want to pay attention to.
I read that before I posted. There is obviously a strained relationship there. Core Security claims all that interaction with VMWare but even so they cannot get their facts straight in the article...uh huh...yeah....They should have waited until March 15 when the patch should be ready. There was no need for them to make VMWare users vulnerable if they don't turn off file sharing now. If they had kept their mouth shut since VMWare reports no users affected adversely then we could have continued to use file sharing while waiting for the patch. Now though that the weakness has been blared all over the place prematurely some hacker will try and take advantage so we have to turn off file sharing until the patch is issued. The patch is already out for some products.

VMWare Workstation and Player are outstanding products and while Core Security tries to intimate that VMWare is dragging their heels in fixing this, I don't believe that is true.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
Erie, PA
·Verizon Online DSL


edit:
February 27th, @10:08AM

quote:
I read that before I posted. There is obviously a strained relationship there.
I see no strain at all but a failure by VMWare to maintain a dialog with Core Security which has resulted in VMWare being in the hot seat now and you do not like it.
quote:
Now though that the weakness has been blared all over the place prematurely some hacker will try and take advantage so we have to turn off file sharing until the patch is issued
Core Security gave the devs of VM Ware ample time to get their patch released. To bad VMWare failed to maintain a dialog.
quote:
VMWare Workstation and Player are outstanding products and while Core Security tries to intimate that VMWare is dragging their heels in fixing this, I don't believe that is true.
Believe what ever you want to but the facts are are there for all to see. That is those that want to see them.

Kudo to Core Security.

Edit* Removed one comment and changed some wording.

--
"There is nothing more deceptive than an obvious fact". - Sherlock Holmes
Forums » Up and Running » Security » SecuritySecurity Software Updates 22 Mar 2008 »
« help How to fix the header of your i.e.  


Sunday, 12-Oct 09:08:48 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9 years online! © 1999-2008 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [142] It's Cable TV Rate Hike Season
· [97] Wholesale Bandwidth Prices Still Dropping
· [96] Symmetrical FiOS No Longer Qualifies For Bundle Discounts
· [95] Is Comcast Cooking Up a 22Mbps/5Mbps Tier?
· [88] Time Warner's Ugly Feud With LIN TV
· [77] Half Of New iPhone Owners Came From Verizon
· [70] Supreme Court TiVo/Echostar Ruling
· [70] Microsoft: U.S. Broadband Policy 'Total Failure'
· [67] Verizon Unveils Blackberry Storm
· [64] XOHM Online In Additional Launch Markets
Most people now reading
· Safty Question about K & T wiring. Very worried... [Home Repair & Improvement]
· Extreme HD and Essentials [Verizon FIOS TV]
· [Connectivity] Neighbor using MY router to connect to Internet? [Comcast HSI]
· What's Your "Home Page"? [General Questions]
· Fake MS update letter w/attachment [Security]
· Man with 36 accounts, raids by himself [World of Warcraft]
· Heads up; Usenet, "Rarpassgen.exe" virus [TekSavvy]
· RMA shows up 1 month after I received new router [Verizon Fiber Optics]
· Sudden upstream loss - ~210kbps - new to Tomato/MLPPP [TekSavvy]