Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

NEWS - December 13, 2005

Dec 13, 2005 12:32AM PST
Taking on rootkits with hardware
By Joris Evers
Staff Writer, CNET News.com
Published: December 13, 2005, 4:00 AM PST

Word that Intel is taking on rootkits came as a surprise to some last week. But researchers at the chip giant have been working on security technologies for several years.

What's more, Intel's labs aren't just looking to protect computers against rootkits, Travis Schluessler, a security architect at the chipmaker, told CNET News.com. The Santa Clara, Calif., company hopes it can also help stave off the more familiar threat of worms and viruses.

The surprise may partly be because Intel is primarily a hardware company. Security for PCs and servers has traditionally been provided by software, sold by companies such as Symantec, McAfee, Trend Micro and a slew of smaller players.

more here
http://news.com.com/Taking+on+rootkits+with+hardware/2008-1029_3-5992309.html?tag=html.alert

Discussion is locked

- Collapse -
Patches out for IE holes, Sony-related issue
Dec 13, 2005 6:53AM PST

By Joris Evers, CNET News.com
Published on ZDNet News: December 13, 2005, 1:23 PM PT

Microsoft on Tuesday provided a fix for a "critical" security flaw in Windows that is being exploited in online attacks against Internet Explorer users.

The software maker released the patch in security bulletin MS05-054, as part of its monthly patching cycle. The update also plugs three other security holes in Internet Explorer, the Web browser component of Windows. One of the other flaws is also deemed critical, but Microsoft said it is not aware of any malicious code that takes advantage of it.

"An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system," Microsoft warned in its security bulletin, referring to the two critical IE flaws. The vulnerabilities exist in all currently supported versions of the browser on all editions of Windows.

more here
http://news.zdnet.com/2100-1009_22-5993789.html?tag=zdnn.alert

- Collapse -
Attack code out for old Firefox bug
Dec 13, 2005 9:38AM PST

By Joris Evers, CNET News.com
Published on ZDNet News: December 13, 2005, 3:47 PM PT

If you haven't updated your Firefox or Mozilla Web browser lately, now might be a good time to do so.

Computer code that demonstrates how a known flaw in an older version of the browsers can be exploited in a potentially crippling attack was published on the Web over the weekend. The vulnerability was fixed in Firefox 1.0.5, released in July, and Mozilla Suite 1.7.9 according to Mozilla.

The code was published by Aviv Raff, a developer in Israel. "I think it's been enough time for people to upgrade from v1.0.4 of Firefox," he wrote on his blog Sunday. Raff's code doesn't do much harm, but he notes that it would be easy to turn it into malicious code that commandeers a vulnerable system.

The vulnerability is in the way the Web browsers handle JavaScript, according to a Mozilla alert dated July 12, the day Firefox 1.0.5 was released. An attacker could craft a malicious Web site use the flaw as a conduit to, unbeknownst to the user, run malicious code on a vulnerable PC.

more here
http://news.zdnet.com/2100-1009_22-5994026.html?tag=zdnn.alert