dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
1117
share rss forum feed


dp
Premium,MVM
join:2000-12-08
Greensburg, PA
kudos:7

3 recommendations

MS Security Bulletin Advance Notification - Oct 4, 2012

Click for full size
This is an advance notification of seven (7) security bulletins that Microsoft is intending to release on October 9, 2012.

1 rated Critical and 6 with a rating of Important.

»technet.microsoft.com/en-us/secu···ms12-oct
--
Microsoft® Security MVP, 2004 - 2012
DP's Security Bits

art22gg
Premium
join:2005-02-16
Courtenay, BC
kudos:6
Thanks dp...


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
reply to dp
Why won't they patch sidebar?


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:2

1 recommendation

said by Cartel:

Why won't they patch sidebar?

I thought MS had given up on the Sidebar.

quote:
"Microsoft hasn't issued a security patch to fix the vulnerability," he wrote on Sophos' Naked Security blog. "They're suggesting you completely nuke your Windows Sidebar and Gadgets."
»www.nbcnews.com/technology/techn···s-879132

I never used it (and turned it off) anyway...
--
Don't feed trolls--it only makes them grow!


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
reply to dp

This is typical of Micro$oft. "Instead of fixing a problem with our crappy coding we are just going to disable a feature that you paid for!"



antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
reply to dp
Here we go again. :P


Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:11

1 recommendation

reply to Cartel
said by Cartel:

Why won't they patch sidebar?

I think the only patch Microsoft would issue is one that removes or disables it altogether. And apparently disabling already exists in the publsihed Microsoft Knowledge Base Article 2719662. I however too am interested in seeing a fix applied, however, it appears Microsoft is abandoning any and all support for Microsoft Sidebar as a result of execution of arbitrary code. I will however NOT accept a fix in the form of a patch through Windows Update that DISABLES a "feature" in Windows Vista/Windows 7.
--
Remember that cool hidden "Graffiti Wall" here on BBR? After the name change I became the "owner", so to speak as it became: Dustyn's Wall »[Serious] RIP


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17

1 recommendation

Discussed at legnth here:
»Microsoft Security Advisory (2719662)
I cannot access my Gadgets since this and other KB's released otherwise.


Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:11
»Re: Microsoft Security Advisory (2719662)
Did you notice what dminer See Profile said in that thread, about them being reversed? I won't touch them anyways as I like my gadgets.
What other KBs were released after this one to address the same thing?


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico
Yup, Dustyn See Profile, fully aware the the Fix It's were reversed. I was not able to determine what the issue was that particular Fix It article, so I disabled both.
On the assumption that both were not in effect and I am not able to access my widgets now, there must have been susequent KB's released since.
Which, I honestly don't know.


lordpuffer
RIP lil
Premium
join:2004-09-19
Rio Rancho, NM
kudos:2
reply to dp
Thanks dp.


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico
reply to Dustyn
The widget in services via an HJT Log looks like this:

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

See: »www.pacs-portal.co.uk/startup_pa···.exe.htm
»windows.microsoft.com/en-US/wind···/gadgets
quote:
It is no longer possible to get more gadgets from the Windows website.


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TekSavvy DSL
·Shaw
·TELUS
Click for full size
said by siljaline:

The widget in services via an HJT Log looks like this:

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

See: »www.pacs-portal.co.uk/startup_pa···.exe.htm
»windows.microsoft.com/en-US/wind···/gadgets
quote:
It is no longer possible to get more gadgets from the Windows website.

lol they trick people into installing silverlight to see they have no gadgets....lol


StuartMW
Who Is John Galt?
Premium
join:2000-08-06
Galt's Gulch
kudos:2

1 recommendation

reply to Dustyn
said by Dustyn:

...as I like my gadgets.

Ah ha, the truth is out.


Inspector Gadget
--
Don't feed trolls--it only makes them grow!


Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:11

1 recommendation



siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
reply to Cartel
No Silverlight on this machine. MS can keep their take on Flash.


antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
United State
kudos:4
Reviews:
·Time Warner Cable
reply to Dustyn
said by Dustyn:

I'm always on duty!


(youtube clip)

I always wondered how secured Penny's computer book is.


Exidor
Premium
join:2001-05-04
Brampton, ON

2 recommendations

reply to siljaline

Re: no Windows Sidebar security update


dden_Updates
My Windows 7 Home Premium 64-bit system is fully patched and up-to-date, with the exception of declining Silverlight and Bing.

All the gadgets I have installed are still fully functional. Having said that, these gadgets were installed prior to the security advisory and I don't plan to install any new ones.

I may consider moving some of the gadget functions over to another program, such as Rainmeter, but several of the gadgets I use daily are, to me at least, indispensable.

It seems to me that there may be a lot of systems out there still running gadgets, whether or not the operator is aware of the Fix-it, as a security update to replace the MS Fix-it has not, to my knowledge, been pushed through Windows Update.