Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.misc > #534 > unrolled thread
| Started by | cykros@devio.us |
|---|---|
| First post | 2014-02-18 20:01 +0000 |
| Last post | 2014-02-19 09:59 -0500 |
| Articles | 4 — 4 participants |
Back to article view | Back to comp.misc
CERT warns Operation SnowMan hackers are unstoppable cykros@devio.us - 2014-02-18 20:01 +0000
Re: CERT warns Operation SnowMan hackers are unstoppable Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2014-02-18 16:58 -0800
Re: CERT warns Operation SnowMan hackers are unstoppable wjwlsn <ibillwilson@gmail.com> - 2014-02-18 23:00 +0000
Re: CERT warns Operation SnowMan hackers are unstoppable Spalls Hurgenson <spallshurgenson@gmail.com> - 2014-02-19 09:59 -0500
| From | cykros@devio.us |
|---|---|
| Date | 2014-02-18 20:01 +0000 |
| Subject | CERT warns Operation SnowMan hackers are unstoppable |
| Message-ID | <le0e6p$9ra$1@dont-email.me> |
From the "just stop using IE" department: About a week ago, the Operation SnowMan campaign was discovered, when FireEye researchers noticed hackers trying to infiltrate VFW.org. The attack relied on vulnerabilities in Microsoft's XMLDOM ActiveX control, allowing code to run in Internet Explorer without prompting the user, offering up otherwise private information regarding the local filesystem and internal network to the operators of a malicious webhost. Microsoft is aware of the problem, but as of yet, no patch has been released. http://www.v3.co.uk/v3-uk/news/2329500/us-cert-warns-operation-snowman-hackers-are-unstoppable
[toc] | [next] | [standalone]
| From | Oregonian Haruspex <bob_davis_retired@yahoo.com> |
|---|---|
| Date | 2014-02-18 16:58 -0800 |
| Message-ID | <le0vjn$lj2$1@dont-email.me> |
| In reply to | #534 |
On 2014-02-18 20:01:29 +0000, cykros@devio.us said: > From the "just stop using IE" department: About a week ago, the Operation > SnowMan campaign was discovered, when FireEye researchers noticed hackers > trying to infiltrate VFW.org. The attack relied on vulnerabilities in > Microsoft's XMLDOM ActiveX control, allowing code to run in Internet > Explorer without prompting the user, offering up otherwise private > information regarding the local filesystem and internal network to the > operators of a malicious webhost. Microsoft is aware of the problem, > but as of yet, no patch has been released. > > http://www.v3.co.uk/v3-uk/news/2329500/us-cert-warns-operation-snowman-hackers-are-unstoppable > So, are the hackers unstoppable, or is Microsoft software just un-securable? Anyway, as I don't use Microsoft OSs any more, I must ask - do developers seriously still deploy ActiveX controls, and do people still allow them to run? It seems like this is the sort of security error on par with having no root password on a publicly available Unix shell login!
[toc] | [prev] | [next] | [standalone]
| From | wjwlsn <ibillwilson@gmail.com> |
|---|---|
| Date | 2014-02-18 23:00 +0000 |
| Message-ID | <bmioidFjmmtU1@mid.individual.net> |
| In reply to | #534 |
> From the "just stop using IE" department: About a week ago, the Operation > SnowMan campaign was discovered, when FireEye researchers noticed hackers > trying to infiltrate VFW.org. The attack relied on vulnerabilities in > Microsoft's XMLDOM ActiveX control, allowing code to run in Internet > Explorer without prompting the user, offering up otherwise private > information regarding the local filesystem and internal network to the > operators of a malicious webhost. Microsoft is aware of the problem, > but as of yet, no patch has been released. > > http://www.v3.co.uk/v3-uk/news/2329500/us-cert-warns-operation-snowman-hackers-are-unstoppable > France's Snecma was hit too... they make the engines for the Rafale fighter. "http://www.chicagotribune.com/business/sns-rt-us-hacking-snecma-20140218,0,3352787.story" -- Now frequenting comp.misc daily in a prolonged fit of netstalgia.
[toc] | [prev] | [next] | [standalone]
| From | Spalls Hurgenson <spallshurgenson@gmail.com> |
|---|---|
| Date | 2014-02-19 09:59 -0500 |
| Message-ID | <85h9g9pr1rpj1cnhj1v7dvrr805qopgac0@4ax.com> |
| In reply to | #534 |
On Tue, 18 Feb 2014 20:01:29 +0000 (UTC), cykros@devio.us wrote: >From the "just stop using IE" department: About a week ago, the Operation >SnowMan campaign was discovered, when FireEye researchers noticed hackers >trying to infiltrate VFW.org. The attack relied on vulnerabilities in >Microsoft's XMLDOM ActiveX control, allowing code to run in Internet >Explorer without prompting the user, offering up otherwise private >information regarding the local filesystem and internal network to the >operators of a malicious webhost. Microsoft is aware of the problem, >but as of yet, no patch has been released. > So... Snowman Hackers are unstoppable... unless you don't use Internet Explorer, in which case they are? I mean, an ActiveX vulnerability? At least with a Java hack you were ensured of being able to infect anyone regardless of what browser or operating system they were using. But this sort of problem is about as terrifying as being in a runaway car because you can't be bothered to step on the brakes.
[toc] | [prev] | [standalone]
Back to top | Article view | comp.misc
csiph-web