8.20.2002

Is this your computer...?



I was reading Jerry Pournelle's Byte column this week, which lead to peruse this, Next-Generation Win32 exploits: fundamental API flaws. Gleeful news:

This paper presents a new generation of attacks against Microsoft Windows, and possibly other message-based windowing systems.

The flaws presented in this paper are, at the time of writing, unfixable. The only reliable solution to these attacks requires functionality that is not present in Windows...
Oh joy, oh rapture. Well, at least Microsoft does publish The Ten Immutable Laws of Security.

No comments: