household-appointed admins will be working overtime #
Posted Wednesday 10th September 2008 06:07 GMT
No problems here. Thanks, Canonical.
Posted Tuesday 9th September 2008 23:34 GMT
...that they can so comprehensively phuck up the display of _images_
If they can't handle what should be *simple* parsing of image data securely - which has a defined, clear data structure, what the hell are people doing trusting them with an entire operating system for ?!?
Paris, because she'd phuck it too. Not that we'd mind, as long as it was on camera.
Posted Wednesday 10th September 2008 01:08 GMT
You gotta wonder how many 'critical' updates Micro$oft can put out. They never seem to stop coming.
Posted Wednesday 10th September 2008 03:55 GMT
Since the original JPEG exploit in gdiplus, I've yawned at this repeatedly.
If you're still surfing the web as "owner" or "administrator" since December 2005, when Three Rings Design crippled their web site in fear over this thing, then you deserve to get infected with whatever malware comes through a GDI exploit.
Fool me once... etc etc
And Dan Goodin needs that hot clue injection. Still. Or maybe a clue intraveinous bottle. Or something.
Posted Wednesday 10th September 2008 06:07 GMT
No problems here. Thanks, Canonical.
Posted Wednesday 10th September 2008 07:32 GMT
You've missed the point entirely and with this stance are not really much more secure than before.
Why? Because windows is not secure. At all. Once any kind of software is on your system it's a fairly trivial matter for it to elevate security to a higher level, even if this is only at the next boot of the system. While it is possible to lock down a windows PC, you're always fighting against the inherent problems with the fundamental "design" of a system that splatters an insane mix of data and executables throughout the entire system (quite apart from applications that require OS changes as part of the install). Combine this with the need to keep a system flexible (one of the main advantages of PCs) and you have a system that is impossible to secure without crippling it into uselessness.
Posted Wednesday 10th September 2008 07:32 GMT
I agree with you Colin.
How can they completely screw up rendering an image?
Why would the image system want to execute code from within an image?
Posted Wednesday 10th September 2008 12:18 GMT
This household-appointed admin made a "C:>dir gdiplus.dll /s" on a XP Pro laptop and found out that there are 23 files with this name, with different sizes and date stamps. The one in Windows\system32 is *not* the newest. I wonder what the update updated.
Posted Wednesday 10th September 2008 12:18 GMT
I see you managed to phuck up your image processing - that is definitely not Paris
Posted Wednesday 10th September 2008 18:19 GMT
Dammit, it must be a rendering error - I was booted into Windows when I posted it...
Sign up, sign up for The Register's weekly IT security newsletter - click here