Bugtraq mailing list archives
Re: Microsoft Critical Updater Security
From: cgrey () WCFAMILY COM (Corwin J. Grey)
Date: Tue, 26 Jan 1999 12:45:11 -0800
--zhXaljGHf11kAtnf Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Carson, I believe you are correct. I have noticed something similar on two = occasions now, where it appears that the Critical Update program is updatin= g something without requestion permission. I have not give permission on th= e security certificates, and have to authenticate all other transfers from = MS. I'm not sure exactly what is taking place, but I don't like it.=20 I'm going to being tracking all Critical Update changes using logs of all d= irectory entries to see exactly what is being altered. As soon as I get ano= ther occurence and can identify what files have been modified I will post t= he results here. On Mon, Jan 25, 1999 at 09:50:56PM -0500, Carson Gaspar wrote:
"Gale" =3D=3D Gale S Ringley <gringley () HOTMAIL COM> writes:=20 Gale> The behaviour you describe occured because at some point, you or so=
meone
Gale> else who uses your computer told Windows to trust all content from Gale> Microsoft. The wait and restart was indeed an update to Windows Up=
date.
Gale> To prevent this in the future, you will have to open in IE4 View> Internet Options>Content>Certificate>Publishers and remove the Gale> publishers you no longer want to trust. =20 Not true. I can confirm this. It transferred _something_ and then asked if I wanted to restart. After that, I got the usual "do you want to trust this ActiveX control" message before it scanned my system for new updates. =20 Something else is going on. =20 -- Carson Gaspar -- carson () cs columbia edu carson () tla org carson () cugc org http://www.cs.columbia.edu/~carson/home.html Queen Trapped in a Butch Body
--=20 +---------------------------------------------------------------------+ | Corwin J. Grey Systems Administrator | | Linux Consultant West Coast Family | | http://www.wcfamily.com | | | | Shell, email, mailing list, and ircd accounts | +---------------------------------------------------------------------+ PGP: finger cgrey#pgp () wcfamily com --zhXaljGHf11kAtnf Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use MessageID: vu5YSxoeshMnRA9RgpsTVZeX3ShIaJ1V iQCVAwUBNq4bRdAOh9qeNxrzAQG8CgP/eMusRMU4f/4AsOObHMva6hPUPM3+PKPM 40rKjHkYFtPS3FGD7STrwwsRfCi3ZqOnGWRB9C2WhuKC5gLeiOn2aE++P68c/sfJ HA4zrlcnJE2huNFmgtUjmee1uaVheIyBvQl8lkSfZzzorByA5xGnQ1u+X0xfAikV /UhIfyVIle8= =onOb -----END PGP SIGNATURE----- --zhXaljGHf11kAtnf--
Current thread:
- Re: Microsoft Critical Updater Security Gale S. Ringley (Jan 24)
- Re: Microsoft Critical Updater Security Carson Gaspar (Jan 25)
- Re: Microsoft Critical Updater Security Corwin J. Grey (Jan 26)
- Re: Microsoft Critical Updater Security Carson Gaspar (Jan 25)