FYI - Windows update patch KB828028 (See "Here's the catch")

Microsoft warned customers on 02/10/04 about unusually serious security
problems with its Windows software that could let hackers quietly break into
their computers to steal files, delete data or eavesdrop on sensitive
information.

Microsoft, which learned about the flaws more than six months ago from
researchers, said the only protective solution was to apply a repairing
patch it offered on its Web site. It assessed the threat to computer users
as "critical," its highest rating.

http://apnews.myway.com//article/20040210/D80KJ01G1.html
http://www.msnbc.msn.com/id/4233357/
http://news.com.com/2100-7355_3-5156647.html?tag=nefd_lede
http://www.washingtonpost.com/wp-dyn/articles/A30202-2004Feb10.html

Microsoft urged consumers to apply the repairing patch immediately if they
were using Windows NT, Windows 2000 or Windows XP or Windows NT Server,
Server 2000 and Server 2003.

If you are running Win Me you don't have to worry about it.
If you keep Windows up-to-date, it's already been installed. (Update
KB828028 on 2/10/2004 )

Get the patch here if it hasn't been installed or click IE /tools /windows
update to apply the patches.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS04-007.asp

Here's the catch:
After installing the patch, the browser no longer supports handling
usernames and passwords embedded in Web addresses using the "@" symbol.
Example:

http://username:[email protected]/resource.ext
https://username:[email protected]/resource.ext

This will change the way a lot of Internet users access password protected
sites.... and online email accounts. Microsoft offers a workaround and
registry tweak that may help if you need his option.
http://support.microsoft.com/default.aspx?scid=kb;en-us;834489

 

http://www.mozilla.org
http://www.opera.com/

 

You say they warned customers on the 2nd of October this year?
You must mean 02/10/03.

Why must we wait until October?

-Barry
========
Web page: http://members.optusnet.com.au/~barry.og
Atheist, radio scanner, LIPD information.