Windows Vista dedicated viruses

[clau]

One day after the official launch of Windows Vistaa programmer nicknamed "Second Part To Hell" or Mario made public a few examples of malacious code, which is in fact a tutorial for making viruses, which exploits the security holes in Monad, the next version of command prompt, included in the Beta 1 verions of Windows Vista.

What about that?

 

[Duke]

The more features you add, the more holes to exploit I recon.

 

[clau]

Yes, that is true.

But I think there is only two way that this guy could make a virus to a new Windows:
1. he works at MS and this is how he knew what he can exploit or
2. the same problem was in older verions and wasn't corrected

 

[stealthhosts]

Yes, that is true.

But I think there is only two way that this guy could make a virus to a new Windows:
1. he works at MS and this is how he knew what he can exploit or
2. the same problem was in older verions and wasn't corrected

Neither,
It was a security consultancy who found a loopwhole in the new CLI which will not be released in vista, it is a proof of concept included in the beta. It has not been fully tested and will be released up to two years after vista.

It's basically vista's updated dos (to make it easier for people to understand where the problem lies)

 

[clau]

Ok, I get it.

So this guy is or was actualy working for MS? Not a good working force at all. And, technicaly speeking, he made a virus for a sotfware wich will be released two years later.

Nice going.

 

[stealthhosts]

No a security consultancy company found the potential exploitable piece of code, no ties to Microsoft at all.

No virus whatsoever has been found, the article relates to a piece of 'potentially exploitable' code. the article confirms the existance of this code and its valid function, then explains how it may be used to produce undesired effects.

The problem is that other media has interpreted this a virus which is as far from the truth as possible.

If you like, the company alerted microsoft to an error in their code, hardly a new thing is it?

 

[clau]

Aha,

I got it now. Probably I understud wrong or the souce from where i read this.

So they found another error. That is not new at all, you are right.

But I don't understand why are they making these things public. To give ideas to the virus makers?

 

[stealthhosts]

If it is public knowledge then the incentive (and public pressure) is there to fix it.

A far better solution that microsoft keeping quiet until the proverbial hits the fan IMHO