main

Windows security update planned

Karl   on 13 October 2003 - 07:03 · 30 comments & 1796 views

Advertisement (Why?)
Stung by criticism over lax software security, Microsoft Corp. disclosed plans Thursday to update its flagship Windows operating systems early in 2004 to make consumers less vulnerable to hackers.

Microsoft said the changes, announced by chief executive Steve Ballmer during a trade conference in New Orleans, will be offered free in the next “service pack” update to users of Windows XP and Windows Server 2003 software, the company’s latest versions for consumers and businesses.

The announcement was aimed at calming Microsoft customers increasingly irritated by the ease with which hackers and others have broken into Windows computers. Adequately protecting an average personal computer can take far more time than many customers are willing to spend.

Microsoft promised to improve the way in which Windows manages computer memory to protect users against commonly exploited software flaws known as buffer overruns, which can trick Windows into accepting dangerous commands. Some of the most damaging attacks in recent months fall under this category.

The company promised to improve its built-in firewall feature, which has drawn criticism in the past because it was not especially strong and was routinely turned off in new copies of Windows. The update will automatically turn on the updated firewall and enable companies to centrally manage each computer’s protective settings.

ed. Didn't this all start with "trustworthy computing"? Another believe it when i see it job.
View: Full Story @ MSNBC


Changes since 6.4.6.6 :

  • Just a minor fix for today, the Smacker decoder interface had a small bug which made mpc crash with certain video renderers and colorspaces.

Changes since 6.4.6.5 :


  • The "VMR7/9 (renderless)" output can be configured to use textures and 3d rendering, this way you can avoid the "point-sampling" bug of StretchRect. Because there is this new rendering mode now, the old 2d mode won't crop the upper left side anymore to force bilinear filtering. So, if you find the image pixelated, try the 3d mode instead.

  • Subresync toolbar can delete entries from vobsub files without crashing! (why noone noticed this? :P) Finally, this makes cutting idx/sub in mpc possible!
  • In dvd mode when a menu is running, the auto-hideing controls will only reappear if you move the mouse cursor at the very bottom of the screen. This helps activating buttons in that region a bit :)

  • Two new renderers: null (any) and null (uncompressed). They weren't too hard to make ;), but they can be useful for example if you want to save cpu cycles by turning of the video when you only want to hear the audio. "any" will connect to any media type which can be recognized as video or audio, "uncompressed" also checks for the common rgb/yuv (video), pcm/ieee (audio) types and only connects on them.

  • I read the bugreport about the crashing of the player when network connection get broken or the cd gets ejected. It happened because of an unhandled exception I forgot to catch. Now it won't crash at that same place for sure, but it might later somehwhere, I haven't had time to test it completely.

  • Just came across a strange dvd this week where the "fbi warning" clip at the beginning was playing a "little" skippy. This was the first mpeg2 stream libmpeg2 was decompressing into two picture descriptors per frame, both had one field only. Because I had no idea about what to do with the second one or how to handle it, the dshow decoder only summed up the time length of the first picture (time per frame * number of fields / 2). Basically this means every frame lasted half long and the image was slowly falling behind then catching up continuously.

  • Speeded up built-in avi splitter's interleaving verifier a bit (this pops up that new error dialog occasionally telling you sequential playback is not possible). The scanning time for a regular 700MB avi decreased from 200ms to 50ms on my cpu.

  • After desktop resolution switches the alternative renderers will recover much better now.

  • Lastly, the biggest news at the end, hoping noone will notice it (hehe): Smacker/Bink playback support (shh, don't tell anyone), now you can view old and new game movies in mpc! Of course there is no decoder inside (it would cost a fortune for me), so smackw32.dll/binkw32.dll has to be put next to mplayerc.exe to make it work. The larger the dll the higher the chance it will be able to open recent smk/bik files (hint: up-to-date smackw32.dll: ~150k, binkw32.dll: ~360k). The just released halo (pc) game has the newest dll I could find for bink at the moment, but there are many others to test on p2p networks like edonkey. A newer smackw32.dll is a little harder to find for v4 smacker files (which the current "rad video tools" will produce) if you are browsing your old game collection, but I could find a usable dll with emule just as easy. Also, mpc will even open videos from self-playing exes, but only the first one. If there are many packed into one exe, or if the container file is a large, merged data file of a game, then get a hex editor (e.g. hex workshop) and extract the videos one-by-one (it was fun to rewatch a few ff8 videos this way, they were still amazing :). Smacker usually starts with SMKn (n: 1-4), while Bink starts with BIKh or BIKi and the second DWORD (4 bytes) equals to the total length - 8. Sadly, Smacker doesn't seem to have a length field :(, for that you have to search the next SMK.. header, or extract it until the end of the file. Another bad thing about Smacker and Bink: they rarely have keyframes, very-very rare. For this reason Smacker will show messed up picture after a seek, but Bink will correctly decompress every previous since the last keyframe, which of course will go painfully slow for a large file (just try it on that 100MB+ half-life 2 video :).


Post a comment · Send to friend Comments · There are 30 additional comments
(1 reply) #1 gameguy on 13 Oct 2003 - 07:13
trustworthy computing in a service pack?
#1.1 belto on 13 Oct 2003 - 07:21
BLAH, BLAH, BLAH!
(8 replies) #2 Fubar on 13 Oct 2003 - 08:07
Well im glad they are doing some thing bout it , now lets see if they warn users who already have firewalls as i can see this causing a bit of a problem :/ anyhoo hope MS pull it off
#2.1 CooCooCaChoo on 13 Oct 2003 - 08:29
Well im glad they are doing some thing bout it , now lets see if they warn users who already have firewalls as i can see this causing a bit of a problem :/ anyhoo hope MS pull it off.

Need I remind you and other people reading this forum that SP2 for Windows XP is still another 9 months away. That is another 9 months of continuous patching and working around Microsofts flaws.

Microsoft has the cash and has the man power, too bad they're more interested in hyping the latest version of Office rather than fixing their current products that cusumers have fallen victim
#2.2 Fubar on 13 Oct 2003 - 09:59
Dont need to remind me that m8 , but some how with the recent outburst of worms id like to think MS will be making SP2 available sooner than 9 months
either that or wait around for more attacks to happen , well just have to wait and see because you yourself dont know for certain that it will be another 9 months, youve just gone on what people have wrote before all the latest attacks
#2.3 cork1958 on 13 Oct 2003 - 10:30
9 months away!! I thought I'd read somewhere that it was coming sooner than that.
#2.4 JaggedFlame on 13 Oct 2003 - 12:40
How is "early in 2004" 9 months away?
#2.5 mezron on 13 Oct 2003 - 14:15
May 31st is in the first half... May 30th is earlier yet
#2.6 JaggedFlame on 13 Oct 2003 - 14:39
That's seven months.
#2.7 CooCooCaChoo on 13 Oct 2003 - 16:44
QUOTE (#2.4)
How is "early in 2004" 9 months away?

When the original Microsoft annoucement was for SP2 to be delivered middle of next year.
#2.8 CooCooCaChoo on 13 Oct 2003 - 16:46
QUOTE (#2.3)
9 months away!! I thought I'd read somewhere that it was coming sooner than that.

Windows 2003 update will be the end of this year, beginning of next. Windows XP SP2 will be middle of next year.

As for the forcast in the article, I'll believe it when I see it. Microsoft would have to perform a miracle to syncronise the two service pack updates.
#3 JohnsonBox on 13 Oct 2003 - 08:47

Hahaha! Good news!
I'm glad that Ballmer didn't say to his customers: "Why don't you call police when being hacked?! Wacho!"
That is one of the whys Gates is in a way lovely.
#4 lucasvanos on 13 Oct 2003 - 10:54
QUOTE
Another believe it when i see it job.
exactly
#5 VikingStorm on 13 Oct 2003 - 11:18
Well it said early in 2004, I wonder if it'll do anything besides pretend to say it's secure. Perhaps, it changes the logon screen to Windows XP SP2-Secure
(7 replies) #6 isus on 13 Oct 2003 - 11:26
if it's gonna turn on the gay windows firewall on my connections, i'd like to know what else it tries to do to my pc.
#6.1 Fubar on 13 Oct 2003 - 11:35
ok apart from being a little unclear , what is gay about the inbuilt firewall ? being ripped straight from freebsd i dont really see how it is gay ? maybe you just cant use it right, oh and if you read further on it says they are making improvements to it ,
#6.2 shift on 13 Oct 2003 - 13:02
i didn't know a firewall could have a sexuality. ****ing moron.
#6.3 CooCooCaChoo on 13 Oct 2003 - 16:49
QUOTE (#6.1)
ok apart from being a little unclear , what is gay about the inbuilt firewall ? being ripped straight from freebsd i dont really see how it is gay ? maybe you just cant use it right, oh and if you read further on it says they are making improvements to it

Who said it was ripped from FreeBSD? FreeBSD's one is based off OpenBSD's. Microsoft either created it or license technology for it, just like their defragmenting software on XP and 2000 is licensed from Executive Software.

The one that had alledged to have BSD code was the 9x series for the TCP/IP stack. Windows NT was a clean implementation.
#6.4 skinnyjm on 13 Oct 2003 - 17:39
Maybe he means it is a "happy" firewall.
#6.5 isus on 13 Oct 2003 - 19:33
whos the "****ing moron" when you hafta resort to that?

it is gay because
- there are better choices for firewalls out there
- and this blocks udp. i like udp, therefore, udp stays.
#6.6 gameguy on 13 Oct 2003 - 20:45
it blocks UDP and TCP. you have to make a rule to open a port, whether it's TCP or UDP. ICF doesn't unconditionally block UDP...
#6.7 Jon on 14 Oct 2003 - 09:00
Linux used to get slagged of a lot because people simply didn't understand it.

ICF is the same, users who need a pretty GUI and wizards slag it off. Its a shame because ICF has lots of users, and is no where near as bad as people think, its actually a very efficient design to suit the largest group of users possible (stateful inspection being significant)
(1 reply) #7 Fonze on 13 Oct 2003 - 15:21
looks like they are starting to promote security on Windows Update. found a link to this page at windows update. Protect Your PC
#7.1 Midnight Mick on 13 Oct 2003 - 15:45
no bother, I read it wrong! :/
(2 replies) #8 g33kb0y on 13 Oct 2003 - 16:42
The update will... enable companies to centrally manage each computer’s protective settings

I'm definitely interested in this little part.
#8.1 SomeDork on 13 Oct 2003 - 17:29
Group policy. Nothing really new.
#8.2 roadwarrior on 14 Oct 2003 - 18:02
Except that Group Policy doesn't go quite as far as controlling the ports, etc. that can be accessed on the PC.
(1 reply) #9 DrunkenMaster on 14 Oct 2003 - 03:52
Is this actually going to be a *FREE* service pack? Or is it going to be along the lines of Windows 98 -> 98 SE where you pay for not much of an upgrade. If MS wants money for it they can kiss my ...... they made the problem, their cost to fix it.

#9.1 JaggedFlame on 14 Oct 2003 - 04:35
Do you ever read the article?

QUOTE
Microsoft said the changes, announced by chief executive Steve Ballmer during a trade conference in New Orleans, will be offered free in the next “service pack” update to users of Windows XP and Windows Server 2003 software, the company’s latest versions for consumers and businesses.
#10 rudeboyjef on 14 Oct 2003 - 11:58
i have two things to say. one, how many people actually know what a firewall is, or how to properly set it up? granny gertrude wouldn't, she just turns her pc on and lets it go. majority of the users just load the os with their defaults and let it rip. second is we have had security problems with microsloth OS's ever since we were able to access the internet, along with countless other problems. instead of completely redoing and distributing a flawful os every two years with numerous service packs and hotfixes, why not spend some real time making something i don't have to update daily? wait, that's too easy, and too light on their pockets.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)