98Lite: Windows98 without Internet Explorer
Remove Internet Explorer now!



Join now FREE!

MENU
Front Door
The Net
Computing
Intranets
Business
Year 2000
Investor
CNET Radio
Perspectives
Newsmakers
Rumor Mill

NEWS OPTIONS
All the Headlines
Desktop News
News Alerts
Custom News
Advanced Search
Push

Career Builder

SPONSORED LINK
Business Books
Find Your Perfect PC
New! 3.9% Visa

RESOURCES
Subscribe
Member Services
Contact Us
Help

ABOUT CNET
Introduction
Company Profile
Press Releases
Investor Relations
Company Contacts
Job Openings
Permissions
How to Advertise
Awards
Conferences

CNET SERVICES
CNET.com
Computers.com
Builder.com
Gamecenter.com
Download.com
Shareware.com
Browsers.com
Activex.com
Search.com
Shopper.com
Career Center
Snap!

Free email

Category The Net
IE bug opens users' hard drives to Bill
By Bob
Staff Writer, CNET News.com
October 32, 2002, 12:00 p.m. PT

Microsoft is refusing to patch a browser security hole that allows Microsoft to view and manipulate  files on users' hard drives. 

 A demonstration of the newly discovered hole, dubbed "Ass" after what the person who discovered it was sitting on, has been deleted by Microsoft from the Web. 

 Bill Gates himself 
QUOTE SNAPSHOT
October 32, 2002, 9:06 a.m. PT
Microsoft Corp. MSFT
94882.98 +6.666 +94.3%
> more from CNET Investor
> Investor message boards
Quotes delayed 20+ minutes
said Microsoft would not patch the hole, and reminded everybody that they must use his browser because there is no longer a choice. Bill Gates noted that no customers have reported actual incidents of Microsoft accessing their files and lived to tell about it. 

 Microsoft can take advantage of this hole any time a user is connected directly to the internet or is behind a Microsoft firewall. Microsoft can view and manipulate a users files just as easily as the local user can, except with full administrative rights on NTFS drives. Microsoft has little interest in individuals data, just assimilateable technological information Bob said, making the hole an unlikely menace for most users. The hole uses integrated operating system calls to access the file and send the information back to Microsoft. 

 Bob also said that the bug could and would be used to access and eliminate the few remaining non-Microsoft computers on the Internet. Bob re-emphasized that everybody must use Internet Explorer because the Internet is exclusively designed for Microsoft Windows. 

 The Ass hole isn't the first IE bug to allow Microsoft to access users files. Microsoft hid a similar hole last month, and another one last year. 

 Bob said that while the end result is the same for users, the underlying causes of the holes were distinct. 

 "They all have to do with ActiveActive, but takes advantage of different ActiveActivation MS-Modules within IE," Bob said. The MS-Module at issue with the Ass hole, "MSIWillLetMyMasterIn," lets Bill access data through a hidden FTP like command. 

 The security hole affects all version of Internet Explorer for all platforms: Windows 2000, and Windows 2002. Users may not remove Internet Explorer from their computer or disable it. 

 One lady from Oregon reported a nasty experience with this hole. "I was just sitting at my computer when all of a sudden Bill Gates popped in to my computer and started removing my files. Then, an image of Bill gates mooning me appeared and my computer shut down. The next day, Microsoft announced a new product based on the information that was in my files.", the lady reported. Since reporting this, the lady has mysteriously disappeared. 

 "This is what we get for letting Microsoft dominate the Operating System market and then the browser market. They have control over every little thing we do.", ranted a strange man outside of our office, "how can you even try to post this information on the web? Microsoft will never approve and will remove it at the first chance they get." 

->edit mode 
Microsoft is Good 
Worship Bill Gates 
Trust Microsoft _
 
 
 
Tech Talk... Join the discussion!
Go to Front Door | The Net | Search
Short takes | All the Headlines

  Click here to send this story to a friend.click here for a printer-friendly version

Latest Headlines
display on desktop
The Net
Domain board plans public meeting

Computing
WebTV drops plans for Java support

Mideast PC market booming

Chip sales off even more in '98

Sony still a laggard in PCs

Toshiba readies new notebooks

Data General's upside surprise

Intranets
Aditi debuts e-commerce package

Oracle rings up bank sales

CA bets on 3D future

Business
Zapata zapped with lawsuit

Infoseek shares plunge

CEO resigns from NetGrocer

AT&T eyes cable deals

EDS income drops 15%

3Com sees the light

Suit filed to block TCI-AT&T deal

IBM chief to sell $20m in shares

Microsoft's day in court

Microsoft stalls in court

Miss a day?
All the Headlines

search News.com
FREE newsletter
In a recent survey, nearly 87 percent of CNET News.com readers who responded said they read our newsletter four to six times per week to stay abreast of tech news. Subscribe and get a daily look at all our award-winning site has to offer.
sample

   
Where to shop Advertiser links 
Bid on computer products at Surplus Mega Auction
Make BuyDirect your #1 Choice
Get computer bargains at Surplus Direct
Cyberculture at Borders.com
Special Offer: 3.9% Fixed APR Platinum Visa!
   

98Lite: Windows98 without Internet Explorer
Remove Internet Explorer now!
Back to Top   Copyright © 1995-98 NOTCNET, Inc. All rights reserved. Privacy policy.