Marc Erickson

Ed Bott’s Microsoft Report writes:
I read through the license agreement for Windows Vista Home Basic, Home Premium, and Ultimate (PDF) and saw lots of new language. Much of it just formalizes what Microsoft has been doing under separate agreements for some time, such as the Validation requirements introduced with Windows Genuine Activation.
But I have yet […]

The world moves on and if we want to continue to use Windows, Vista is the Microsoft answer.
I’ve been playing with Vista Ultimate RC2 over the last couple of days, and it’s not the answer for me! Microsoft has an annoying habit of moving configuration settings around with new versions of Windows - and additionally […]

Local exploitation of a design error vulnerability in Symantec Corp. AntiVirus can allow an attacker to execute arbitrary code with kernel privileges.
The vulnerability specifically exists due to improper address space validation when the NAVENG and NAVEX15 device drivers process IOCTL 0×222AD3, 0×222AD7, and 0×222ADB. An attacker can overwrite a user supplied address, including code segments, […]

Windows XP, Media Center Edition, 2005, MCE, can’t, cannot, play, video, file

This article describes a problem where you experience long delays when you log on to the domain and when you open network shares. There are a variety of possible causes. These causes include problems with the WebClient service, problems with proxy settings, and problems with the server configuration.

Intel, chipset, Viiv, media

After you install the Wi-Fi Protected Access (WPA) update (815485) on a Windows XP-based computer, your wireless network adapter may not be able to connect to your wireless access point by using a Wired Equivalent Privacy (WEP) key.
When this problem occurs, the wireless network connection status indicates “Wireless Connection cannot be used.”

When you try to connect to the Microsoft Windows Update Web page or to the Microsoft Update Web page on a Microsoft Windows Server 2003-based or a Microsoft Windows XP-based computer, you receive the following error message:
Error number: 0×800A01AE
The Web site has encountered a problem and cannot display the page you are trying to view

George Ou of ZDNet.com writes:
Nearly four years ago, Microsoft’s Bill Gates ate some humble pie and declared that they must do much better with their security issues and launched the Trustworthy Computing Initiative. One and a half years later, the company launches Windows 2003 Server with fewer vulnerabilities and extremely defensive default […]

Suzi Turner of Spyware Warrior writes:
Just when 180solutions’ CEO Keith Smith is whining about anti-spyware companies, or to use his words “scanning applications”, Spyware Warrior has captured another 180solutions installation with no notice and no consent through a security exploit. From a crack site, too. Nice. Way. To. Go.

John Borland of ZDNet News writes:
Sony BMG Music Entertainment and the Electronic Frontier Foundation digital rights group jointly announced Tuesday that they had found, and fixed, a new computer security risk associated with some of the record label’s CDs.
The danger is associated with copy-protection software included on some Sony discs created by a company […]

Alex Wheeler has reported a vulnerability in Panda Antivirus, which potentially can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to a boundary error in “pskcmp.dll” when performing Lempel-Ziv decompression of ZOO archives. This can be exploited to cause a heap-based buffer overflow and may allow arbitrary code execution […]

John McCormick of TechRepublic.com writes:
Microsoft still hasn’t patched a serious Internet Explorer vulnerability, and malicious hackers are taking advantage of the fact. In addition, a remote code execution threat has surfaced in Real Networks RealPlayer. Get the details about these and other security issues in this edition of the IT Locksmith.

Tweak MCE gives you access to systems settings and options not normally exposed in the Windows XP Media Center Edition user interface, including remote control settings, Skip and Replay time customizations, user interface options, and more. It also helps you to optimize Media Center Extender for plasma and non-CRT displays.

Grinler of BleepingComputer.com writes:
Table of Contents

How this rootkit affects your computer

CDs that contain this rootkit

How to tell if your CD has the Sony - XPC DRM Rootkit

How to tell if your computer is infected with the Sony / XPC DRM Rootkit

Rootkit removal and detection

Technical Details

Ed Foster of GRIPELOG writes:
You’re probably getting tired of hearing about Sony BMG’s rootkit DRM [not me!], but one central mystery about it remains to be solved. What was Sony’s real motive for what many consider behavior that is awfully close to a criminal act? To answer that question I think we’re going to need […]

As I predicted, the EFF will file a lawsuit in Los Angeles County Superior Court against Sony BMG for the problems caused by the First4Internet XCP CDs - it is also filing for the problems caused by the SunnComm MediaMax CD copy protection software.
Also:

SQL Server 2005 Express Edition is free to download, has no time limits, and is freely redistributable (with registration). With a database size limit of 4 gigabytes (GB) and support for 1 CPU and up to 1 GB of RAM, SQL Server 2005 Express Edition is suitable for application embedding or lightweight application development.

Back in June I asked for links to sites that specialized in drivers and software for Windows XP 64 bit edition. I apologize for taking so long to post the follow up - my excuse is that aliens kidnapped me… Yeah, that’s it! That’s my story and I’m sticking to it!

In EFFector 18.40 - which I received late Friday night - the EFF is planning an announcement on Monday, November 21, 2005, about its plans on the Sony CD rootkit issue. It has solicited responses from customers in California and New York who have been infected by the rootkit - I suspect a lawsuit […]