Craig Burton

Unlike Bush, CNet’s John Roberts admits mistakes:

Earlier today, Mark Pilgrim took CNET to task for presuming to create YAML (Yet Another Markup Language). That was decidely not the case, but there was cause for confusion.The culprit? An old feed, not RSS, which was mistakenly listed on the CNET Download.com RSS page and presented as if [...]

[Read more →]

The Register gives sage advice for avoiding the recently discovered Netsky variant:

Advice to defend against Netsky in all its varied guises follows a familiar pattern: update AV signature files, apply patches, use a personal firewall and wear a regulation tin-foil hat.
Source: The Register

[Read more →]

Mike Nash’s group sponsored a chat this morning about security. I missed it but there is already another one scheduled on May 13, the Thursday after next month’s Patch Tuesday:

Security in Microsoft ProductsJoin Mike Nash, Vice President for the Microsoft Security Business Unit, and his team of security experts each month. Microsoft is working hard [...]

[Read more →]

“Patch Tuesday” apparently sparked hostile vulnerability scanning even before the patches were released:

Among the vulnerabilities addressed in patches released this week is a fix for an SSL flaw that left Windows 2000 and NT4 SSL sites open to remote compromise.
Mike Prettejohn, a director at Netcraft, said scanning activity for SSL vulnerabilities across the Net increased [...]

[Read more →]

Some people are not happy with the way Microsoft is approaching security with this Tuesday’s patch releases. Note that some of the vulnerabilities covered in the patches were identified by third parties as early as last September:

However, some security researchers took the software giant to task for waiting to release a particular patch that covers [...]

[Read more →]

According to F-Secure a new variant of NetSky has been discovered:

A new Netsky variant was found - Netsky.V. It does not send itself as an attachment but uses HTML emails which exploit vulnerability known as Microsoft Internet Explorer XML Page Object Type Validation Vulnerability and tries to download and execute itself from an infected host.
Source: [...]

[Read more →]

I found the article that reports a worm masquerading as a patch.
This event is probably what triggered Microsoft recommending that you actually “type” the location of the patches released yesterday. Ugly. I don’t link to the page that has the following info on it because of the reported delays. But this is what Microsoft is [...]

[Read more →]

According to Netcraft as reported by Donna Ventura:

Microsoft’s Windows Update web site has been experiencing slow response times in the wake of yesterday’s release of critical security updates. A browser request through Internet Explorer eventually raises the site after an extended wait, and in some cases it is possible to successfully download and install updates [...]

[Read more →]

The New York Post talks about corporate blogging:

More and more, corporations are turning to blogs as a way to reach their customers without relying on television or newspapers. Unlike news releases, blogs create a personal connection with employees, with a relaxed tone and the ability for readers to ask questions.
The article goes on to [...]

[Read more →]

Dave recommends Technorati come up with an icon that links to its not so new feature of showing all of the links that point to new posts.

Boing Boing is linking from each post to a Technorati query that shows you who’s pointing to the post. Andrew Grumet has been doing this for some time, probably [...]

[Read more →]