Re: [Full-disclosure] Unofficial Microsoft patches help hackers, not security

[Joe Average <yahooinsider@xxxxxxxxx>]

>From my blog:

""[Unofficial patches are available, as is a leaked official patch]
[Unofficial patches are merely used by hackers as a tool to patch machines
they've compromised, to stop other hackers hacking the same machine,
although the machine is still accessable to the hacker.] [The consumer goes
along to Windows Update on Tuesday and doesn't think they need a patch,
because Microsoft tells them its not needed. Little does the consumer know
their machine was patched by a hacker, who now has control over their
computer network.]""

It means the unofficial patch is as harmful as the vulnerability and exploit
code its self.


On 1/4/06, Niek <niek@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
>
> On 1/4/2006 7:33 PM +0100, Joe Average wrote:
> > ........ The majority of consumers aren't
> > getting your unofficial patches, but you can be sure the hackers are
> using
> > them, and using them to their advantage.
>
> Yeah hackers are now using the unofficial patch to protect themselves!!!
> nooooooooooooooooo
>
> Niek
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/