funsec mailing list archives

RE: Did Windows Update take out the Skype network?


From: rms () computerbytesman com
Date: Mon, 20 Aug 2007 15:47:58 -0400 (EDT)

This explaination does not compute.  The security updates that failed were
for Office and XP and had nothing to do with graphic drivers.  In another
forum, someone else said that error code 80246002 means that a patch files
is corrupted.  Why is the Windows Update Web site sending down so many bad
files?!?!?  The samething happened in 2006 on my system.

To find these problems, I had to manullay go through page after page of
security updates.  Something is wrong with this situation.

Richard


From
http://au.answers.yahoo.com/question/index.php?qid=20070617051639AAG3DcP
: "Code 80246002 = Graphics card driver error - when using updates do
not update any drivers from the windows site, instead go to the
manufacturers site (in this case I think its usually the nvidia cards)"


Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.eweek.com/cheap_hack/
Contributing Editor, PC Magazine
larry.seltzer () ziffdavisenterprise com

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
On Behalf Of rms () computerbytesman com
Sent: Monday, August 20, 2007 12:39 PM
To: funsec () linuxbox org
Subject: RE: [funsec] Did Windows Update take out the Skype network?

I don't run the MacOS or RedHat so their product quality issues don't
affect me.  However, I do run Windows XP and its product quality
problems do affect me alot.  I was just reviewing my update history on
my work laptop and discovered that 20 or so secrutiy patches didn't
install properly back in Feb. 2007.  Yikes.  What do I do now?  Does
anyone know what hex error code 0x80246002 means?  Seesh!

Is anyone else seeing silent Windows Update failures?  Here's where to
check:


http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us

Back in June, my home PC locked up for 30 minutes each day due to bogus
update to Windows Update engine.  A patch for the update finally fixed
the problem.

Richard


This has nothing to do with the number of updates, but the fact that
everyone was applying them at roughly the same time. They could have 1

update a month on their regular schedule and the effect, from Skype's
standpoint, would be the same.

And some would dispute your claims about the number of updates
(http://blogs.technet.com/security/archive/2007/08/16/july-2007-operat
in g-system-vulnerability-scorecard.aspx ), at least as compared to
the competition. Do MacOS and RedHat have too many updates too?

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.eweek.com/cheap_hack/
Contributing Editor, PC Magazine
larry.seltzer () ziffdavisenterprise com

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
On Behalf Of rms () computerbytesman com
Sent: Monday, August 20, 2007 11:17 AM
To: funsec () linuxbox org
Subject: RE: [funsec] Did Windows Update take out the Skype network?

Here's the official Skype blog entry on the meltdown:

   http://heartbeat.skype.com/2007/08/what_happened_on_august_16.html

In my book, there are way too many security patches for Windows.  The
Skype meltdown is an example of collateral damage.

Another problem that I've seen with Microsoft Update since the
beginning of this summer is that a collection of Office 2003 patches
fail to install and everytime I reboot my computer Microsoft Update
attempts the install again and fails again.  I'm never notified of
these failures and I'm not sure how to fix the problem in order to
secure my system.

Richard


I hope they don't have the gall actually to blame Microsoft for it.
Obviously it's a flaw in their network, and shows a hole in their own

testing.

Perhaps it's also an indication that more Windows users are updating
more quickly.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.eweek.com/cheap_hack/
Contributing Editor, PC Magazine
larry.seltzer () ziffdavisenterprise com

-----Original Message-----
From: funsec-bounces () linuxbox org
[mailto:funsec-bounces () linuxbox org]
On Behalf Of rms () computerbytesman com
Sent: Monday, August 20, 2007 10:26 AM
To: funsec () linuxbox org
Subject: [funsec] Did Windows Update take out the Skype network?

http://blog.wired.com/monkeybites/2007/08/windows-update-.html

Skype is finally back online after a massive two-day outage which
began on Thursday, August 16th and rendered the VoIP service useless
for an estimated 220 million users. As we reported on Friday, Skype
has denied charges that the outage was the result of an attack, but
the company delayed an official explanation until today.

According to Skype the outage was caused by a massive number of users

restarting their machines, which flooded the Skype network with login

requests. Skype blames the restarts on Windows Update, presumably
large numbers of users rebooting after installing this month's "Patch
Tuesday"
Windows patches.

...



_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: