1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

News WannaCry malware downs systems worldwide

Discussion in 'Article Discussion' started by Gareth Halfacree, 15 May 2017.

Page 1 of 2
  1. Gareth Halfacree

    Gareth Halfacree WIIGII! Lover of bit-tech Administrator Super Moderator Moderator

    Joined:
    4 Dec 2007
    Posts:
    17,361
    Likes Received:
    7,185
    Gareth Halfacree, 15 May 2017
    #1
  2. Pookie

    Pookie Illegitimi non carborundum

    Joined:
    4 May 2010
    Posts:
    3,588
    Likes Received:
    195
    I'm sorry but the buck stops with Microsoft, they built the OS and it's their job to insure that it's secure. Maybe they need to invest in more time researching vulnerabilities rather than messing about with crappy stuff like Cortana.
     
    Pookie, 15 May 2017
    #2
  3. Mr_Mistoffelees

    Mr_Mistoffelees The Bit-Tech Cat. New Improved Version.

    Joined:
    26 Aug 2014
    Posts:
    5,482
    Likes Received:
    2,690
    No it doesn't, Microsoft have made secure (against this vulnerability) OS software available to everyone who wants it. It is the end user's responsibility to update. It is not Microsoft's fault that much of the NHS and many other organisations, are still running a 16 year old OS.
     
    Mr_Mistoffelees, 15 May 2017
    #3
  4. Broadwater06

    Broadwater06 Minimodder

    Joined:
    10 Apr 2016
    Posts:
    278
    Likes Received:
    14
    But why should they keep supporting XP, they told us very clearly when the support end, they even extended the support more than any other Windows.
     
    Broadwater06, 15 May 2017
    #4
  5. tonyd223

    tonyd223 king of nothing

    Joined:
    12 Nov 2009
    Posts:
    389
    Likes Received:
    2
    Why didn't the NSA tell Microsoft? Because it was using the vulnerabilities for itself?
     
    tonyd223, 15 May 2017
    #5
  6. Gareth Halfacree

    Gareth Halfacree WIIGII! Lover of bit-tech Administrator Super Moderator Moderator

    Joined:
    4 Dec 2007
    Posts:
    17,361
    Likes Received:
    7,185
    Yes, exactly that. Which, incidentally, goes directly against the Vulnerability Equities Process (VEP) introduced by the Obama administration which requires all government agencies to share discovered vulnerabilities with vendors unless they can successfully argue for a temporary stay (such as "we're actively using this in an ongoing investigation which is due to wrap up on the 15th of November," rather than "we might need this in the future so we're keeping it to ourselves.")
     
    Gareth Halfacree, 15 May 2017
    #6
  7. fix-the-spade

    fix-the-spade Multimodder

    Joined:
    4 Jul 2011
    Posts:
    5,588
    Likes Received:
    1,372
    So if Microsoft is officially blaming the NSA both for discovering the vulnerability, withholding knowledge from Microsoft of it and for failing to keep the information secure, where does this leave the rest of the world legally?

    I can see lawyers round the world rubbing their hands with glee at the thought of suing the US government. Hoarding security flaws to carry out (presumably) surveillance without warrants and/or outside of their jurisdiction and then allowing those security flaws to fall into the hands of organised crime. That could be quite the damages claim.
     
    fix-the-spade, 15 May 2017
    #7
  8. MLyons

    MLyons 70% Dev, 30% Doge. DevDoge. Software Dev @ Corsair Lover of bit-tech Administrator Super Moderator Moderator

    Joined:
    3 Mar 2017
    Posts:
    4,218
    Likes Received:
    2,811
    I'm curious who the blame would legally fall on if a death had been the result of this. Does it go to the person that started the attack, the NHS, the NSA or Microsoft. It also seems like the person(s) behind this didn't get that much of a pay day based on the amount seen going into the wallets.
     
    MLyons, 15 May 2017
    #8
  9. Corky42

    Corky42 Where's walle?

    Joined:
    30 Oct 2012
    Posts:
    9,648
    Likes Received:
    388
    INAL so I'm probably wrong but I'd say it lies with the NSA as they're the ones who discovered the vulnerability and did nothing to strengthen the worlds defenses against it.

    Frankly i find it ridiculous that when it comes to chemical, biological, radiological and nuclear weapons we have a plethora of international agreements governing there use but when it comes to 'cyber space' the rules seem so lax.

    We wouldn't allow a government agency to use anthrax or ebola for anything other than researching ways to defend against them but when it comes to vulnerabilities in software it seems fine to weaponise those.
     
    Corky42, 15 May 2017
    #9
  10. RedFlames

    RedFlames ...is not a Belgian football team

    Joined:
    23 Apr 2009
    Posts:
    15,676
    Likes Received:
    3,156
    And people wonder why MS forced automatic updates on everyone.
     
    RedFlames, 15 May 2017
    #10
  11. N17 dizzi

    N17 dizzi Multimodder

    Joined:
    23 Mar 2011
    Posts:
    3,239
    Likes Received:
    359
    What repercussions will the NSA face? My guess would be none, except measures to keep the vulnerabilities the staff are employed to find more secure.
     
    N17 dizzi, 15 May 2017
    #11
  12. Chicken76

    Chicken76 Minimodder

    Joined:
    10 Nov 2009
    Posts:
    952
    Likes Received:
    32
    Is there a tool I can point at my machines to see which are vulnerable through the network?
     
    Chicken76, 15 May 2017
    #12
  13. wolfticket

    wolfticket Downwind from the bloodhounds

    Joined:
    19 Apr 2008
    Posts:
    3,557
    Likes Received:
    647
    Air gap your backups people.
     
    wolfticket, 15 May 2017
    #13
  14. DriftCarl

    DriftCarl Minimodder

    Joined:
    2 Nov 2004
    Posts:
    602
    Likes Received:
    12
    Well the good news is I freed up loads of room on my virtual image backup server, since I could argue that it would be a pain to patch them all up and we dont really need them anymore, so they are deleted and I have now freed up a few TB of space :)
     
    DriftCarl, 16 May 2017
    #14
  15. Corky42

    Corky42 Where's walle?

    Joined:
    30 Oct 2012
    Posts:
    9,648
    Likes Received:
    388
    Not everyone, only home users really as most other versions allow the deference of updates.

    Oddly enough it seems home users were the least effected or probably the least reported.
     
    Corky42, 16 May 2017
    #15
  16. N17 dizzi

    N17 dizzi Multimodder

    Joined:
    23 Mar 2011
    Posts:
    3,239
    Likes Received:
    359
    You mean backups that are isolated from your system, or levitate them using high powered fans? I do both anyway, who doesn't.
     
    N17 dizzi, 16 May 2017
    #16
  17. MLyons

    MLyons 70% Dev, 30% Doge. DevDoge. Software Dev @ Corsair Lover of bit-tech Administrator Super Moderator Moderator

    Joined:
    3 Mar 2017
    Posts:
    4,218
    Likes Received:
    2,811
    I believe there is a script for nmap and a module for metasploit.
     
    MLyons, 16 May 2017
    #17
  18. MLyons

    MLyons 70% Dev, 30% Doge. DevDoge. Software Dev @ Corsair Lover of bit-tech Administrator Super Moderator Moderator

    Joined:
    3 Mar 2017
    Posts:
    4,218
    Likes Received:
    2,811
    :worried:
     
    MLyons, 16 May 2017
    #18
  19. Anfield

    Anfield Multimodder

    Joined:
    15 Jan 2010
    Posts:
    7,087
    Likes Received:
    983
    http://www.nextpowerup.com/news/36028/the-shadow-brokers-claim-more-leaks-are-coming/
     
    Anfield, 17 May 2017
    #19
  20. SuperHans123

    SuperHans123 Multimodder

    Joined:
    27 Dec 2013
    Posts:
    2,206
    Likes Received:
    435
    But Linux is a ballache to use and is not compatible with Planet Earth.
     
    SuperHans123, 17 May 2017
    #20
Page 1 of 2
Tags: Edit

Share This Page