Microsoft: Hackers Wouldn't Bother To Spoof SP2's Security Center

No_Style · Aug 27, 2004, 04:03 PM

Microsoft on Thursday flatly denied reports that one of Windows XP Service Pack 2's most touted features leaves users open to possible attacks. In effect, hackers have better things to do, Microsoft said.

According to one outside analysis, SP2's Windows Security Center, the dashboard-like console that monitors and reports on the status of various security defenses -- from firewalls to anti-virus software -- can be spoofed by hackers into displaying false information, such as an enabled firewall or a even a totally bogus anti-virus package supposedly protecting the PC.

Security status could be faked, said the researchers, by a number of possible exploit avenues, including the drag-and-drop vulnerability in Internet Explorer that was made public last week. The possible goal by hackers: disable defenses but at the same time remain under the radar.
_______________
Read More/Source: CRN

GutterPunk · Aug 27, 2004, 04:06 PM

I havent bothered to download SP2 yet as i am not quite sure all the buggies are wiped out... maybe witht he mass population taking on sp2 they will focus on that and leave us sp1'ers alone for awhile

~~BMG_Cya=-~~ · Aug 27, 2004, 04:20 PM

I installed this Official SP2 yesterday...and it's the usual pile of
caca. Screws up all your security, boot-up processes, and a few
other things that anyone with some PC experience has taken
care of already with other programs.

Also, the shutdown time is back to pre-SP! levels. Had a 3 minute
system shutdown time last night. Believe that's a new record.
*And that's with Tune XP enabled as well.!!!!!*

No_Style · Aug 27, 2004, 04:27 PM

I have a tweak which shuts XP down a whole lot quicker

XP waits for every process to properly die, so something must be lagging behind and XP is waiting for it to die.. I'll look for the tweak which reduces the wait time and just goes ahead and kills the process.

Here's a direct link to the registry file from Kelly's Korner XP

Great site. The last time I checked up this tweak I only knew about the "WaitToKillServiceTimeOut" variable. I'm going to enable AutoEndTask as well now.

Here's tweak section.

Judas · Aug 27, 2004, 05:14 PM

...first of all... installing SP2 while the tweakes are in place... causes issues... i figured this woud be fairly apparent... also....any other utility being used to change the default of XP will cause problems.. which i also figured would be pretty obvious... shutdown and resort to the default settings.... disable all running programs.. install SP2 and then redo it all... even then, i personally find installing ANY service pack through windows is just terrible.......... never turns out right..... ONLY way to get a nice clean running even FASTER windows install is Slipstream it to a cd andvolla... .ZERO issues to worry about..

No_Style · Aug 27, 2004, 05:32 PM

I don't know about programs, but my registry tweaks weren't affected when I installed SP2. I have no problems so far with the tweaks in place.

Judas · Aug 27, 2004, 05:52 PM

Quote:

Originally Posted by No_Style

I don't know about programs, but my registry tweaks weren't affected when I installed SP2. I have no problems so far with the tweaks in place.

just procautions to take... i know some thing aren't effected... but when your modifieing the way windows runs by disabling services and making registry tweaks and sp2 on install happens to look for these and make installation configurations based on them... your just asking for trouble... (opinion)...

i'd rather go for the best install and worry about getting the tweaks later.. then to screw up a install and have to go through absalutely everything from scratch..

LeanWolf · Aug 27, 2004, 06:33 PM

sounds logical, but on the other hand, my system was heavily tweaked and very few services left running, but the install went without a problem and i have no apparent issues..

Nuke209 · Aug 27, 2004, 06:38 PM

most of the time, users just 'upgrade' over what they have
Me, I use a fresh slipstream version, and it has no errors for me.

~~BMG_Cya=-~~ · Aug 27, 2004, 07:08 PM

Well speak of the Devil...

The things mentioning "slipstream"...I have not heard of before.

But, I did get the damn thing running decently again by:

Removing the 1.0 version of Tune XP...(thought the update would
overwrite the old version...ah well)

Removing and re-intsalling the 1.5 version of Tune XP.

Going into the friggin admin services menu and once again shutting
down all the unnecessary BS. I'm still not down to the 15 running
processes I had before SP2, (19 atm) but I'll find what's causing
that.

Point is...

Make virus writing and hacking a capital offense, those found guilty, have 24 hours to ponder their fate, no appeals and you wouldn't need SP2. (Haha...bit harsh...but...)

eggs420 · Aug 28, 2004, 06:13 AM

Only issue I had was services being defaulted to their bloatware state.

PangingJr · Aug 28, 2004, 10:36 AM

some of the reg tweaks may have to be applied again after the SP install,
but many of the user settings via the registry hacks will not be changed.

everyone who have CD writer and the full network - SP2 update packaged should make a new XP setup CD for themselves,
it'll be useful for the XP setup in future.

ppls who have an image of the XP RTM's or XP SP1's new install with some of their prefered settings may like to use that image file then apply the SP2 later...
here's the setup switchs that you may want to use.

and, ppls who have a slow internet connections should at least order a CD.

Aug 27, 2004, 04:03 PM	#1
No_Style Styleless Wonder Join Date: Jun 2002 Location: Ottawa, Ontario Posts: 6,034 Rep Power: 0	Microsoft: Hackers Wouldn't Bother To Spoof SP2's Security Center Microsoft on Thursday flatly denied reports that one of Windows XP Service Pack 2's most touted features leaves users open to possible attacks. In effect, hackers have better things to do, Microsoft said. According to one outside analysis, SP2's Windows Security Center, the dashboard-like console that monitors and reports on the status of various security defenses -- from firewalls to anti-virus software -- can be spoofed by hackers into displaying false information, such as an enabled firewall or a even a totally bogus anti-virus package supposedly protecting the PC. Security status could be faked, said the researchers, by a number of possible exploit avenues, including the drag-and-drop vulnerability in Internet Explorer that was made public last week. The possible goal by hackers: disable defenses but at the same time remain under the radar. _______________ Read More/Source: CRN __________________ "The Best Style Is No Style" Specifications Here

Aug 27, 2004, 04:06 PM	#2
GutterPunk I = Greatest Dood Join Date: Nov 2003 Location: Nebraska Posts: 5,949 Rep Power: 71	I havent bothered to download SP2 yet as i am not quite sure all the buggies are wiped out... maybe witht he mass population taking on sp2 they will focus on that and leave us sp1'ers alone for awhile __________________ Rock On \m/ Thank you Mousey for the Sig! --------------- Intel Core2Duo E6660 (3.4GHZ) ~ Tuniq Tower 120 ~ Enermax Galaxy 1000W ~ Corsair Dominator @ 1090MHZ 5-5-5-15 (OCZ XTC Modded Cooler)~ EVGA 8800GTX W/ HR-03 Plus 120MM ~ Asus DVD-RW LiteScribe ~ LG DVD-RW ~ Corsair Voyager 2GB ReadyBoost Drive ~ Vantec Nexus Fan Controller ~ ThermalTake Armor 25CM fan ~ Personal Finance Blog: Dent Your Debt

Aug 27, 2004, 04:27 PM	Thread Starter #4
No_Style Styleless Wonder Join Date: Jun 2002 Location: Ottawa, Ontario Posts: 6,034 Rep Power: 0	I have a tweak which shuts XP down a whole lot quicker XP waits for every process to properly die, so something must be lagging behind and XP is waiting for it to die.. I'll look for the tweak which reduces the wait time and just goes ahead and kills the process. Here's a direct link to the registry file from Kelly's Korner XP Great site. The last time I checked up this tweak I only knew about the "WaitToKillServiceTimeOut" variable. I'm going to enable AutoEndTask as well now. Here's tweak section. __________________ "The Best Style Is No Style" Specifications Here Last edited by No_Style; Aug 27, 2004 at 04:35 PM.

Aug 27, 2004, 05:32 PM	Thread Starter #6
No_Style Styleless Wonder Join Date: Jun 2002 Location: Ottawa, Ontario Posts: 6,034 Rep Power: 0	I don't know about programs, but my registry tweaks weren't affected when I installed SP2. I have no problems so far with the tweaks in place. __________________ "The Best Style Is No Style" Specifications Here

Aug 27, 2004, 06:33 PM	#8
LeanWolf alpha male Join Date: Dec 2002 Location: Skyrim Posts: 5,714 Rep Power: 84 System Specs	sounds logical, but on the other hand, my system was heavily tweaked and very few services left running, but the install went without a problem and i have no apparent issues.. __________________

Aug 27, 2004, 04:20 PM	#3
~~BMG_Cya=-~~ Banned Join Date: Mar 2003 Location: U.S.A. Posts: 718 Rep Power: 0	I installed this Official SP2 yesterday...and it's the usual pile of caca. Screws up all your security, boot-up processes, and a few other things that anyone with some PC experience has taken care of already with other programs. Also, the shutdown time is back to pre-SP! levels. Had a 3 minute system shutdown time last night. Believe that's a new record. And that's with Tune XP enabled as well.!!!!!

Aug 27, 2004, 06:38 PM	#9
Nuke209 DriverHeaven Senior Member Join Date: Jul 2002 Location: St. Paul Posts: 568 Rep Power: 0	most of the time, users just 'upgrade' over what they have Me, I use a fresh slipstream version, and it has no errors for me. __________________ 2006 Subaru Impreza WRX

Aug 27, 2004, 07:08 PM	#10
~~BMG_Cya=-~~ Banned Join Date: Mar 2003 Location: U.S.A. Posts: 718 Rep Power: 0	Well speak of the Devil... The things mentioning "slipstream"...I have not heard of before. But, I did get the damn thing running decently again by: Removing the 1.0 version of Tune XP...(thought the update would overwrite the old version...ah well) Removing and re-intsalling the 1.5 version of Tune XP. Going into the friggin admin services menu and once again shutting down all the unnecessary BS. I'm still not down to the 15 running processes I had before SP2, (19 atm) but I'll find what's causing that. Point is... Make virus writing and hacking a capital offense, those found guilty, have 24 hours to ponder their fate, no appeals and you wouldn't need SP2. (Haha...bit harsh...but...)

Aug 28, 2004, 06:13 AM	#11
eggs420 my bud > yours Join Date: Apr 2004 Location: chicago Posts: 399 Rep Power: 0	Only issue I had was services being defaulted to their bloatware state. __________________ AMD64 2800+ // Chaintech VNF3-250 // 2X512mb PDI ddr400 2-3-2-5 // 80gb 7200RPM WD w/8mb cache // Leadtek 6800GT // 144kbit IDSL Clan -=CCC=- Admin 69.31.96.68 BF2 PUBLIC RANKED SERVER 205.218.65.236 BF2 DEMO SERVER

Aug 28, 2004, 10:36 AM	#12
PangingJr Member Join Date: Mar 2003 Posts: 5,989 Rep Power: 71	some of the reg tweaks may have to be applied again after the SP install, but many of the user settings via the registry hacks will not be changed. everyone who have CD writer and the full network - SP2 update packaged should make a new XP setup CD for themselves, it'll be useful for the XP setup in future. ppls who have an image of the XP RTM's or XP SP1's new install with some of their prefered settings may like to use that image file then apply the SP2 later... here's the setup switchs that you may want to use. and, ppls who have a slow internet connections should at least order a CD.