<html><head><style type="text/css"><!-- DIV {margin:0px} --></style></head><body><div style="font-family:tahoma, new york, times, serif;font-size:10pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div><br>Er...whether its patched my Microsoft or patched by a hacker, the
hacker still has the rootkit installed. Your suggestion is to give the
hackers more time to install their rootkits? Brilliant. <br>
<br>dan
<br>
(sorry for the top-posting, not at my normal workstation)<br><br>----- Original Message ----<br>From: Joe Average <yahooinsider@gmail.com><br>To: Niek <niek@asbak.coding-slaves.com>; full-disclosure@lists.grok.org.uk<br>Sent: Wed 04 Jan 2006 01:49:58 PM EST<br>Subject: Re: [Full-disclosure] Unofficial Microsoft patches help hackers, not security<br><br><div>From my blog:</div> <div> </div> <div>""[Unofficial patches are available, as is a leaked official patch] [Unofficial patches are merely used by hackers as a tool to patch machines they've compromised, to stop other hackers hacking the same machine, although the machine is still accessable to the hacker.] [The consumer goes along to Windows Update on Tuesday and doesn't think they need a patch, because Microsoft tells them its not needed. Little does the consumer know their machine was patched by a hacker, who now has control over their computer network.]"" </div> <div> </div> <div>It means the unofficial patch is as harmful as the vulnerability and exploit code its self.<br><br> </div> <div><span class="gmail_quote">On 1/4/06, <b class="gmail_sendername">Niek</b> <<a target="_blank" id="bodyLinks" href="mailto:niek@asbak.coding-slaves.com">niek@asbak.coding-slaves.com</a>> wrote:</span> <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;">On 1/4/2006 7:33 PM +0100, Joe Average wrote:<br>> ........ The majority of consumers aren't<br>> getting your unofficial patches, but you can be sure the hackers are using <br>> them, and using them to their advantage.<br><br>Yeah hackers are now using the unofficial patch to protect themselves!!!<br>nooooooooooooooooo<br><br>Niek<br>_______________________________________________<br>Full-Disclosure - We believe in it. <br>Charter: <a target="_blank" id="bodyLinks" href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and sponsored by Secunia - <a target="_blank" id="bodyLinks" href="http://secunia.com/">http://secunia.com/ </a><br></blockquote></div><br> <div>_______________________________________________<br>Full-Disclosure - We believe in it.<br>Charter: <a target="_blank" href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and sponsored by Secunia - <a target="_blank" href="http://secunia.com/">http://secunia.com/</a></div></div></div></div></body></html>