Microsoft's Windows 7 Meltdown Fixes From January and February Made PCs More Insecure

'Microsoft's January and February security fixes for Intel's Meltdown processor vulnerability opened up an even worse security hole on Windows 7 PCs and Server 2008 R2 boxes. From a report: This is according to researcher Ulf Frisk, who previously found glaring shortcomings in Apple's FileVault disk encryption system. We're told Redmond's early Meltdown fixes for 64-bit Windows 7 and Server 2008 R2 left a crucial kernel memory table readable and writable for normal user processes. This, in turn, means any malware on those vulnerable machines, or any logged-in user, can manipulate the operating system's memory map, gain administrator-level privileges, and extract and modify any information in RAM. The Meltdown chip-level bug allows malicious software, or unscrupulous logged-in users, on a modern Intel-powered machine to read passwords, personal information, and other secrets from protected kernel memory. But the security fixes from Microsoft for the bug, on Windows 7 and Server 2008 R2, issued in January and February, ended up granting normal programs read and write access to all of physical memory' -- source: https://tech.slashdot.org/story/18/03/28/2010240 Time to move to another operating system... Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

On Thu, 29 Mar 2018 13:14:23 +1300, Peter Reutemann wrote:
Time to move to another operating system...
People are so quick to find any excuse to put down Microsoft, aren’t they? Whereas if this were to happen to Linux, they would be bending over backwards to ... ... Oh, wait, this doesn’t happen to Linux. From <http://www.theregister.co.uk/2018/03/29/microsoft_meltdown_out_of_band_patch/>: In other words, Microsoft has just had to put out a patch for a patch for a patch. Oh, and note the lovely subhead: “If at first you don’t succeed, you’re Redmond”.

By the way ... Others have commented that it’s almost as though Microsoft doesn’t want people using Windows 7 any more.
participants (2)
-
Lawrence D'Oliveiro
-
Peter Reutemann