Re: Security Now Podcast: Windows Metafile Vulnerability a Hidden Backdoor?

[Paul E Condon <pecondon@xxxxxxxxxxxxxxxx>]

On Sat, Jan 14, 2006 at 11:05:22AM -0700, Joe Pezzillo wrote:
> 
> Security Now Podcast: Windows Metafile Vulnerability a Hidden Backdoor?
> 
> "Description: Leo and I carefully examine the operation of the  
> recently patched Windows MetaFile vulnerability. I describe exactly  
> how it works in an effort to explain why it doesn't have the feeling  
> of another Microsoft "coding error." It has the feeling of something  
> that Microsoft deliberately designed into Windows. Given the nature  
> of what it is, this would make it a remote code execution "backdoor."  
> We will likely never know if this was the case, but the forensic  
> evidence appears to be quite compelling."
> 
> (transcript)
> 
> http://www.grc.com/sn/SN-022.htm
> 

Joe,
	You really should believe by now that if you are running Windows
you are _not_ doing secure computing. Where is there something new in 
this report?

Of course, no computer is _completely_ secure. You could be struck by 
lightening while running Linux or Mac OS, so they are insecure also.
But to deliberately use Windows and then kvetch about security. Really.


-- 
Paul E Condon           
pecondon@xxxxxxxxxxxxxxxx