New attack proves critical Windows bug 'highly exploitable'

[Daniel ~]

Written by Daniel
Wednesday, 30 January 2008

Security researchers report a working exploit for the TCP/IP flaw that Microsoft had claimed was 'unlikely' to be used by attackers

By Gregg Keizer, Computerworld
January 30, 2008
InfoWorld

Security researchers Tuesday said they'd discredited Microsoft's claim that the year's first critical Windows vulnerability would be "difficult and unlikely" to be exploited by attackers... Front Page

[Aedan]

That reminds me:

Originally Posted by L0pht heavy industries

“That vulnerability is completely theoretical.” — Microsoft
L0pht, Making the theoretical practical since 1992.

[Gizmo]

Originally Posted by Áedán

That reminds me:

Are L0pht still around? I thought they disappeared? L0phtcrack was a GREAT tool.....

[Aedan]

L0pht formed in the shapeless form that was Boston. @stake and L0pht merged, keeping the @stake name. @stake was swallowed by Symantec... the rest is history (and it better stay there).

Various L0pht members are still around, if you know where to go looking for them. You will be able to find some of them speaking at SOURCE Boston 2008 on Friday 14 March.

[dsio]

Its sad because L0pht Heavy industries is one of the coolest names ever. @stake was at least clever. Nobody puts enough effort in anymore =(

[Aedan]

@stake was a fairly clever name from more than one angle. You see, if you went to your web browser and typed in "www.@stake.com", it would work - actually it would try to log you into a website called stake.com with a username of "www.". Fortunately, there was a website called stake.com, although it appears to no longer be registered to symc, instead being squatted.

[dsio]

Kind of like bar.com

The number of people, particularly sysadmins that set automated scripts and web applications to pipe their output to an email and send it to foo@bar.com must be absolutely huge.