Monday, April 30, 2001

MS security updates infected with virus Microsoft security fixes infected with FunLove virus A virus infection of security fix files on Microsoft's partner and premier support Web sites has forced the software giant to suspend certain downloads for more than a fortnight. Microsoft issued an alert on Monday, which states that various Hotfix files on its Premier Support and Microsoft Gold Certified Partners Web sites are infected with the FunLove virus. A copy of the notice said Microsoft has stopped access "in order to protect customers" to an unspecified number of files, and expects to be able to restore access later today. Customers were advised to contact their technical account manager in the interim. [http://www.theregister.co.uk/content/8/18516.html] [Also noted by Jeremy Epstein. PGN] [Dave Stringer-Calvert via risks-digest Volume 21, Issue 37] 0:00 # G!

Hack attacks from China? The FBI cybercrime division called the National Infrastructure Protection Center is warning that Chinese hackers have publicly discussed increasing their activities in the first week of May, in celebration of two Chinese holidays and in memory of the two-year anniversary of the U.S. accidental bombing of the Chinese embassy in Belgrade. The Internet security company Vigilinx warns that it has the potential to escalate into something very damaging if emotions run unchecked. There is no evidence that attacks have been approved by the Chinese government. (AP/*USA Today*, 27 Apr 2001) http://www.usatoday.com/life/cyber/tech/2001-04-27-chinese-hack.htm NewsScan Daily, 30 April 2001 ["NewsScan" via risks-digest Volume 21, Issue 37] 0:00 # G!

Another problem with the DNS I e-mailed a URL, http://www.washtech.com/news/media/9387-1.html. The spelling corrector apparently chanted washtech to washes which is a porno site! The risk here isn't so much spelling correction as the current attempt to use the DNS as a directory. The density of the namespace is just one of the many problems. Bob Frankston http://www.Frankston.com ["Bob Frankston" via risks-digest Volume 21, Issue 37] 0:00 # G!