Following on from the win xp bug that allowed remote execution..

May 30, 2017 122 Replies

I went into my PC supplier - I must have spent millions with him over the years - and showed him a website I had been building with an HTML5 standard video.

I cant remember whether it was 7 8 or vista or whatever he was running but the MS broswer tried to run the movie and the whole computer blue screened.

He was impressed "I haven't seen that for years" he said...

Not what I understood. You have a link to elucidate that?

Anyway, it wasnt in Samba server was it?

You didn't really answer whether you were talking about wannacrypt (ms17-010, CVE-2017-0143) or sambacry (CVE-2017-7494)

I was talking about wanna cry.

Sorry sambacry is a total non event really. was patched ages ago and wasn't that exciting to begin with.

Stop talking rubbish, the bug was in samba which doesn't run on windows.

We are not discussing the bug in windows as you well know!

We are discussing CVE-2017-7494 which is a samba bug.

Even some one as stupid as you should know that you can't fix a bug in windows by applying a patch to a linux machine.

Like IrfanView, PDF-XChange Viewer, and even Notepad?

I've been using Linux (Ubuntu first, now Mint) for a couple of years. I still miss IrfanView. Although it runs happily under Wine, using that makes the machine vulnerable to Windows malware. So I use gThumb which is pretty good. But then you find many Linux graphics programs cant paste a graphics image from the clipboard (including gThumb, unfortunately). That is just crazy. You see an image on a webpage you'd like to magnify, so you right-click | save image. Then what? You have to open something like Gimp to paste the damn thing into.

And although I use qpdfview for acrobat files, I'd prefer to use PDF-XChange Viewer, which I used for many years under Windows. It's another one which runs under Wine, but see above.

And the strange comment about Notepad? Well, Notepad is a piece of crap as a text editor, but it has its uses as a "corrupted" file viewer. On several occasions years ago I had corrupted *.doc files which would not open in Word. They had some very important text in them, so I just opened them in Notepad and recovered the text amongst all the binary rubbish. It took some time, but it was possible. Try that with a Linux text editor such as gedit, and see what happens. If someone uses something as simple as Notepad which does the same thing in Linux for viewing file contents, I'd love to know about it.

Don't get me wrong, I wouldn't go back to Windows. But there are a lot better third-party programs for Windows than just special ones. It's just a result of the massive usage base which has demanded improvements in those programs.

Well plenty of console stuff will do that, Vi and friends, possibly joe which can behave just like wordstar.

Could try pluma.

That's mints answer to gedit

As for pdfs, Ive find that Mates document viewer is as good as it gets

Thought so, but wanted to clarify as this thread seems more about samabcry.

So yes, the vulnerability is in the SMB listener on the PC whether it's a server, or a desktop, I spent most of the weekend that wannacry hit and a good part of the following week scanning a customer's machines with metasploit and a de-fanged version of the exploit.

obviously machines that were hotfixed weren't vulnerable, but of those that were vulnerable, you can either disable SMBv1 by a registry or script setting, or you can firewall them so that port 445 is not reachable. But with firewalling you need to know whether e.g. any remote management is done using psexec which requires a reachable SMB port to use the same IPC$ end point that the exploit does.

Believe me it found hundreds of vulnerable Win2008, Win2012, Win8.1 and Win10 machines, though only a single WinXP machine, lets say they had been a little lax with their patching!

In one group, I saw a thread where he was being given advice, & he actually stated that he did /not/ want to learn anything about Linux! He may /think/ he knows it all and is right, but he's /so/ wrong in a lot of things, it's just laughable. The sad thing is that some other people seem to believe him. Talk about the blind leading the blind.....

En el artículo , Martin Barclay escribió:

QED. "I don't want to know, ner-ner-ner" *fingers in ears* "but I'll moan like a whiny little bitch anyway"

He's the sort of moron that uses a hammer to drive a screw in then complains that the result is s*it.

These OS willy-waving wars bore me rigid. At the risk of repeating myself, an OS is a tool. You use the correct tool for the job you want to do. That D i m is too thick to use the correct tool, or to use a tool correctly even when given good advice, isn't the fault of the tool.

D i m *is* a tool.

My objective is to be off of Windows by the time Win7 support expires, though I'm still on XP at the moment.

I am setting up a Win7 64bbit pro dual boot with Linux Mint whilst I try to come to terms with Linux.

Working ====== Canon MP600R printer via USB though not as well Scanner for above but not as well Import from Canon DSLR Web Email Image file storage and editing software Office apps (providing not reliant on scripts) Access to NAS VirtualBox + FreeDos (to a point)

Not working ========= Setup programs for MP600R Canon's DPP (Raw converter+Editor) which I use extensively Garmin map install software Specialist sound analysis software (used weekly) Office Outlook integration with Windows CE phone (ok - it's old)

Not tested ======== Webcam Fingerprint scanner Linux - Android connectivity USB sound card Sharing folders to other devices

I am pleasantly surprised at how much is easily installed, and equally so, uninstallable. Updates are non-intrusive. The language support folk use is very presumptious even when I make it clear I'm a newbie.

My worry is that I'll want some device or application that will only run on Windows and that I'll be forced to either dual boot, run a VirtualBox instance (not tested with Windows yet) or keep a second machine handy.

Maybe if I wait long enough there will be a Linux version with my name on it :) and it must impede penetration by having the plethora of incarnations that are out there, even within Mint I didn't know which way to go (and still don't, I opted for KDE to start with).

I still use the old DOS LIST program for doing that! Just press 7 to get 7 bit display.

It is generally considered by the experts, that Linux is a more powerful tool than the other OSs. It runs everything from home automation systems,routers, televisions, cell-phones, servers, the Large Hadron Collider, ATMs, Army Rifle sniper sights, onboard automotive systems, avionics, the ISS, 98% of the top 500 supercomputers (the rest being a form of *NIX) etc, etc. It even runs M$ Azure Cloud (which might come as a surprise to some), GCHQ, & the MetOffice Cray XC40 supercomputer - 23 petaflops.

Can't argue with that!

The point is do you want a reliable engine and suspension or chrome trim and tail fins?

Its actually been recommend practice to disable smb v1 and v2 for a while (2014 for v1 is the first time I recall seeing it mentioned) as they are insecure. The exception being if you have old devices that can't use v3. So there shouldn't be many machines running v1 if anyone takes note of the advisories. The NHS in general must but not all of it.

And what about something to implement the Bluetooth HFP stack, so I can use my laptop with its headset plugged in to speak on my mobile ? There was an HFP project back in 2011 (which is where it stayed). I did find a piece that uses PulseAudio, but not in a PnP way (which is what I wanted).

I'm also a bit pissed off that the HP scanner driver needs to know how many pages in the ADF to be able to scan them. (Windows, of course, just scans as many as it finds). HPs own support for HLIP states that you have to state the number of pages you want to scan in advance.

formatting link

There

Really? Most experts know the difference between linux and the desktop system tim has been talking about. You also know that linux is only the kernel and that bsd is another kernel that runs all the desk top stuff if you want. In fact even windows runs most of the desk top stuff if you want to run it.

Then stating that linux runs all the other stuff isn't really the same either as it is only based on the linux kernel and a cut down version at that.

You really should remember that linux is open source software but that not much opens ource software is linux. I doubt if linux makes it into a single percent of open source software.

Even Linus doesn't want credit for everything.

Maybe you want something with wheels and controls in the same place each time?

Linux has a big problem as far as the desktop goes..

Most people already have windows and it runs what they want. So until some killer app that only works on linux comes along most people have no reason to switch to linux however good it is.

While it like this any new devices and services will target windows and/or Mac first and you won't get it on linux until some time later if at all.

At the same time open source is available to port to windows from day one and most writers produce windows versions anyway.

You take your pick, linux if you don't want to pay for a license on a PC and the software does the job. Windows if you need it for some software or hardware. Macs if you need the hardware or are a mug.

Linux has some niche markets like raspberryPi (I like octoprint) and other embedded applications but they will be threatened as other OSes are targeting the same areas now.

M$ are blurring it more now as their visual studio products target windows, android and linux (and maybe OSX?).

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required