Technical Discussion
  >> Windows Issues


Register (or login) on our website and you will not see this ad.


Pages in this thread: 1 | 2 | 3 | >> (show all)   Print Thread
Standard User Brunel
(experienced) Tue 14-Jan-20 20:55:29
Print Post

Windows 10: NSA reveals major flaw in Microsoft's code


[link to this post]
 
https://www.bbc.co.uk/news/technology-51106356

Large update tonight, could it be the patch for it?

Apparently not.

Edited by Brunel (Tue 14-Jan-20 21:06:06)

Standard User Banger
(eat-sleep-adslguide) Tue 14-Jan-20 21:45:54
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Brunel] [link to this post]
 
I suspect it will be an out of band update nearer the end of the month as the US Millitary is the Beta tester for the patch.

Tim
www.uno.net.uk & freenetname
Asus DSL-N55U and ZyXEL VMG1312-B10A Bridge on 80/20 Meg Fibre
Speed Test

Current Sync: 79993/19661

BQM
Standard User bobble_bob
(knowledge is power) Tue 14-Jan-20 22:28:01
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Banger] [link to this post]
 
"The concern is that as soon as the vulnerability is known about in detail, exploits will be produced and the laggards who don't patch will be prime targets."


I thought it was impossible (well with some fancy regedits) to disable automatic updates on Win10? Even if you set up a metered connection, MS can force critical updates on you


Register (or login) on our website and you will not see this ad.

Standard User Oliver341
(eat-sleep-adslguide) Tue 14-Jan-20 23:08:27
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Brunel] [link to this post]
 
In reply to a post by Brunel:
Apparently not.

No? This page suggests KB4528760 fixes it: https://portal.msrc.microsoft.com/en-US/security-gui...

Oliver.
Standard User Banger
(eat-sleep-adslguide) Tue 14-Jan-20 23:25:23
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Oliver341] [link to this post]
 
So it was patched today?

Tim
www.uno.net.uk & freenetname
Asus DSL-N55U and ZyXEL VMG1312-B10A Bridge on 80/20 Meg Fibre
Speed Test

Current Sync: 79993/19661

BQM
Standard User Oliver341
(eat-sleep-adslguide) Tue 14-Jan-20 23:25:54
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Banger] [link to this post]
 
In reply to a post by Banger:
So it was patched today?

Looks like it.

Oliver.
Standard User Banger
(eat-sleep-adslguide) Wed 15-Jan-20 00:19:14
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Oliver341] [link to this post]
 
BBC article above seems rather confused.

Tim
www.uno.net.uk & freenetname
Asus DSL-N55U and ZyXEL VMG1312-B10A Bridge on 80/20 Meg Fibre
Speed Test

Current Sync: 79993/19661

BQM
Standard User Oliver341
(eat-sleep-adslguide) Wed 15-Jan-20 00:19:46
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Banger] [link to this post]
 
In reply to a post by Banger:
BBC article above seems rather confused.

No surprise there then.

Edit: "Brian Krebs, the security expert who first reported the revelation, said the software giant had sent the patch to branches of the US military and other high-level users ahead of its wider release." - I take it to mean the patch was sent to the US military before today, the wider release.

Oliver.

Edited by Oliver341 (Wed 15-Jan-20 00:24:15)

Standard User Brunel
(experienced) Wed 15-Jan-20 00:37:35
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Oliver341] [link to this post]
 
KB4528760: YEP! This was "delivered" tonight.
Standard User Banger
(eat-sleep-adslguide) Wed 15-Jan-20 03:13:43
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Oliver341] [link to this post]
 
The Guardian agrees it has been patched.

https://www.theguardian.com/technology/2020/jan/14/m...

Tim
www.uno.net.uk & freenetname
Asus DSL-N55U and ZyXEL VMG1312-B10A Bridge on 80/20 Meg Fibre
Speed Test

Current Sync: 79993/19661

BQM
Standard User PaulKirby
(knowledge is power) Wed 15-Jan-20 06:24:47
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Oliver341] [link to this post]
 
In reply to a post by Oliver341:
In reply to a post by Banger:
So it was patched today?

Looks like it.

Yup, I had to do a manual update where I then saw the following update:
2020-01 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4528760)

Paul

Standard User bobble_bob
(knowledge is power) Wed 15-Jan-20 09:49:51
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Banger] [link to this post]
 
So a none story then? A vulnerability was found, no evidence of beinh exploited in the wild and its been patched already
Standard User TinyMongomery
(eat-sleep-adslguide) Wed 15-Jan-20 10:38:47
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: bobble_bob] [link to this post]
 
In general, Microsoft are very good when it comes to patching vulnerabilities. But this does emphasize the foolishness of using unsupported versions of Windows. If anyone hasn't already upgraded from Windows 7, and they use the Internet, they should do so now as a matter of urgency.

--------------------------------------------------------------------------
the most monotone poster here smile
Standard User bobble_bob
(knowledge is power) Wed 15-Jan-20 10:41:33
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: TinyMongomery] [link to this post]
 
I work for the NHS and still on Win7. Not sure if we paid for the extra support or not
Standard User Pipexer
(eat-sleep-adslguide) Wed 15-Jan-20 18:53:19
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: bobble_bob] [link to this post]
 
In reply to a post by bobble_bob:
I work for the NHS and still on Win7. Not sure if we paid for the extra support or not

I suspect they will have, at a cost of thousands, all because they can't get their [censored] together!

Andrews & Arnold Home ::1 on Draytek 2862ac - Why settle for inferior?
Standard User TinyMongomery
(eat-sleep-adslguide) Wed 15-Jan-20 20:10:23
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: bobble_bob] [link to this post]
 
Don't worry. The NHS will get support for at least another year.

https://www.theregister.co.uk/2019/12/10/nhs_windows_7/

--------------------------------------------------------------------------
the most monotone poster here smile
Standard User Pipexer
(eat-sleep-adslguide) Wed 15-Jan-20 21:20:09
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: TinyMongomery] [link to this post]
 
In reply to a post by TinyMongomery:
Don't worry. The NHS will get support for at least another year.

https://www.theregister.co.uk/2019/12/10/nhs_windows_7/

Yes but it comes at a cost to us (the taxpayer) via the NHS paying to Microsoft vast sums of money in order to continue beng supported.

Andrews & Arnold Home ::1 on Draytek 2862ac - Why settle for inferior?

Edited by Pipexer (Wed 15-Jan-20 21:20:26)

Standard User Banger
(eat-sleep-adslguide) Wed 15-Jan-20 21:36:51
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Pipexer] [link to this post]
 
Everyone has become a Tax Accountant. laugh

Tim
www.uno.net.uk & freenetname
Asus DSL-N55U and ZyXEL VMG1312-B10A Bridge on 80/20 Meg Fibre
Speed Test

Current Sync: 79993/19661

BQM
Standard User TinyMongomery
(eat-sleep-adslguide) Wed 15-Jan-20 22:07:21
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Pipexer] [link to this post]
 
No. As the linked article states, the NHS are E5 licencees so they qualify for one year's extended support of Windows 7 at no additional cost.

--------------------------------------------------------------------------
the most monotone poster here smile
Standard User epyon
(fountain of knowledge) Thu 16-Jan-20 10:29:34
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Brunel] [link to this post]
 
*tin foil hat on*

I don't think i trust the CIA they glow in the dark if you know what i mean.

Vodafone FTTP - 500/500

ST - https://www.speedtest.net/result/8762732964
MT - https://www.speedtest.net/result/8762738246

VOXI - 4G

BSc (Hons) Cyber Security
Standard User TinyMongomery
(eat-sleep-adslguide) Thu 16-Jan-20 10:35:00
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: epyon] [link to this post]
 
It's the NSA, not the CIA.

--------------------------------------------------------------------------
the most monotone poster here smile
Standard User Nervous
(experienced) Thu 16-Jan-20 10:46:50
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: TinyMongomery] [link to this post]
 
In reply to a post by TinyMongomery:
In general, Microsoft are very good when it comes to patching vulnerabilities. But this does emphasize the foolishness of using unsupported versions of Windows. If anyone hasn't already upgraded from Windows 7, and they use the Internet, they should do so now as a matter of urgency.


YAWN!

The vulnerability spoken about doesn't affect older versions of Windows.

Edited by Nervous (Thu 16-Jan-20 10:53:04)

Standard User TinyMongomery
(eat-sleep-adslguide) Thu 16-Jan-20 10:51:19
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Nervous] [link to this post]
 
Yeah - security is boring.

Which is very good news for the bad guys.

--------------------------------------------------------------------------
the most monotone poster here smile
Standard User Oliver341
(eat-sleep-adslguide) Thu 16-Jan-20 17:13:11
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: TinyMongomery] [link to this post]
 
In reply to a post by TinyMongomery:
It's the NSA, not the CIA.

Indeed, the same NSA that sat on multiple Windows exploits without disclosing them for four years before they were leaked.

Presumably this news is an attempt to convince us they've turned over a new leaf.

Oliver.
Standard User epyon
(fountain of knowledge) Sat 18-Jan-20 09:50:04
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: TinyMongomery] [link to this post]
 
Oh right also i don't see an update hmmm

Vodafone FTTP - 500/500
VOXI - 4G

BSc (Hons) Cyber Security
Standard User TinyMongomery
(eat-sleep-adslguide) Sat 18-Jan-20 10:12:33
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: epyon] [link to this post]
 
You should have had KB4528760 by now.

--------------------------------------------------------------------------
the most monotone poster here smile
Standard User broadband66
(knowledge is power) Sat 18-Jan-20 12:44:02
Print Post

Re: Windows 10: NSA reveals major flaw in Microsoft's code


[re: Oliver341] [link to this post]
 
Couldn't have been particularly bad exploits as they were never exploited so no big deal.

Was Eclipse Home Option 1, VM 2Mb & O2 Standard
Now Utility Warehouse (up to 16mbps) via Talk Talk
Pages in this thread: 1 | 2 | 3 | >> (show all)   Print Thread

Jump to