Windows Worm knocks down corporations

[iago]

http://www.vnunet.com/vnunet/news/2141224/windows-worm-knocks

It owned "CNN, ABC and the New York Times. DaimlerChrysler, United Parcel Service and Kraft Foods too reported that they were affected."

Make sure you all apply patch MS05-039.  This worm only affects Win2k, but xp is still vulnerable!

[RoMi]

CNN was actually hit pretty hard.  All thier broadcasts were pushed back 30 minutes.

[Joe]

* Jojo the Jester gives up on moving things to the security board.

[iago]

This is more "News" than "Security"

[deadly7]

I saw this on the Today show.

Also, the worm only hits you if you download stupid files, i think i'm fine.

Edit: not to mention Trend Micro kills it.

[c0n]

h0h0h0~

[GameSnake]

If it only effects Win2k computers then my question is obvious: why the hell are they still using Windows 2000?!

[RoMi]

A lot of companies still use Windows 2000.  Plus it only affected unpatched Windows 2000.

[Sidoh]

Our MAN's (Metropolian Area Network) Cisco Avvid IP Phone servers still run windows 2000.  Both the one for the phones and the voicemail.

[RoMi]

Are they patched?

[iago]

deadly7 - it's an automated attack, like Blaster or Sasser.  You don't have to download anything, it uses a flaw in Windows to get in. 

whoever complained about win2k - Moving to new systems, especially Windows ones, in large corporations is very difficult and expensive.  It's not like upgrading a single computer, it's more like upgrading 50,000 computers.  And it's not just reimaging, software and data have to be saved, too. 

[GameSnake]

Oh I can see the logic now.
It would be very expensive to drop a hundred a computer x 50,000!

The next obvious question is then: why don't they use Linux?!

[rabbit]

The next obvious question is then: why don't they use Linux?!

Because they aren't iago.

[c0n]

The next obvious question is then: why don't they use Linux?!

Because they aren't iago.

h0h0. nice.

[Ergot]

It's because... They NEVER do tech support themselves. They'll get like that expensive Red Hat thingy... so they have tech support, which ends up more expensive than Windows.

[RoMi]

The next obvious question is then: why don't they use Linux?!

Because they aren't iago.

Even at work iago has to use Windows.

[Joe]

Nah, iago uses Slackware at work.

[iago]

I use both.  Our managed desktops are Windows, because there is currently no good central Linux management solution (like Active Directory).  But my laptop and the servers I look after are all Slackware. 

[Sidoh]

Active Directory are teh pwn!

[Newby]

It's because... They NEVER do tech support themselves. They'll get like that expensive Red Hat thingy... so they have tech support, which ends up more expensive than Windows.

LOL! You sound like my dad.

That's his only argument as to why Windows > Linux in business / servers.

"Sure, it's free, but in the end, ti's more expensive to maintain."

[Ergot]

I would just get Slackware or some other free distro and hire an iago or something.

[Quik]

Actually, Red Hat is less expensive than Windows in many businesses.

And yes, Red Hat is a logical choice for corperations.

[Sidoh]

Actually, Red Hat is less expensive than Windows in many businesses.

And yes, Red Hat is a logical choice for corperations.

So is windows.

( Not saying Windows is better, but you just said it was a logical choice. )

[Quik]

Well, no. Most software companies which develop platform-independant software choose Red Hat because of the enormous amount of support that comes with it, and the small amount of resources required to upkeep it (security, IT team, etc etc).

[Krazed]

Well, any company in this world (that uses computers) has a security department to take care of things. Linux and Windows are both logical choices for companys. However, in most offices, windows is used because it's what most people are adapted to. People are lazy, they don't want to learn something new. Also Ergot's point, Linux is free, however for the training that would be required, and the constant tech support, it would become expensive.

[iago]

Well, any company in this world (that uses computers) has a security department to take care of things.

Actually, very few companies have security departments.  Most of them will hire a consultant, pay them big $$$ for a couple weeks to assess/design/implement/document security measures, then they part ways. 

[Quik]

Well, any company in this world (that uses computers) has a security department to take care of things. Linux and Windows are both logical choices for companys. However, in most offices, windows is used because it's what most people are adapted to. People are lazy, they don't want to learn something new. Also Ergot's point, Linux is free, however for the training that would be required, and the constant tech support, it would become expensive.

Corperate linux is NOT free, but gets many of the features, plus its own, of Windows and not being Windows, yet doesn't lose functionality. And many computer professionals know how to use all types of operating systems.

[Ergot]

However, many average people do not. That an unfortunate downside. It's just that not too many people are exposed to Linux at ALL. Even a bit of DOS would help them out, but Microsoft doesn't like people using command line ;/ ?

[Newby]

Installing drivers is NOT something that is easy in Linux....

Now, imagine installing drivers on 50,000 Linux boxes.

Sound like something a corporation wants to do?

Now, installing drivers on 50,000 Windows boxes is phenemonally easier. Windows Update makes it damn near impossible to fuck up installing drivers!

[Sidoh]

Well, no. Most software companies which develop platform-independant software choose Red Hat because of the enormous amount of support that comes with it, and the small amount of resources required to upkeep it (security, IT team, etc etc).

Actually, Red Hat is less expensive than Windows in many businesses.

And yes, Red Hat is a logical choice for corperations.

Are you saying that software companies are the only types of corporations or something? 

[Quik]

Software companies are corperations, too. The second one was meant at all companies, as an alternative to Windows. First one was specifically from the business point-of-view: Would it make sense to use Linux? If your business is based around Windows programs, that's most likely not a path for you.

[Blaze]

Your crazy Newby if you think someone actually installs all the security updates and jazz by hand for companys.  You do it once, make an image of that harddrive, and then just use that image on all the other ones.

[iago]

Your crazy Newby if you think someone actually installs all the security updates and jazz by hand for companys.  You do it once, make an image of that harddrive, and then just use that image on all the other ones.

Or you use tools like CA Unicenter or WSUS or others. 

For patching corporations, the problem isn't actually rolling out the patches, it's compatibility issues.  Windows patches tend to do things that Microsoft doesn't tell us, and occasionally it conflicts with installed software.  So before patches are rolled out, they have to be tested.  That leaves a window for worms.  As soon as we see an exploit, we tell them to hurry up and get the patch out.  If we see a worm, like last Monday, we tell them to put on the patch _NOW_. 

[Screenor]

Your crazy Newby if you think someone actually installs all the security updates and jazz by hand for companys.  You do it once, make an image of that harddrive, and then just use that image on all the other ones.

Or you use tools like CA Unicenter or WSUS or others. 

For patching corporations, the problem isn't actually rolling out the patches, it's compatibility issues.  Windows patches tend to do things that Microsoft doesn't tell us, and occasionally it conflicts with installed software.  So before patches are rolled out, they have to be tested.  That leaves a window for worms.  As soon as we see an exploit, we tell them to hurry up and get the patch out.  If we see a worm, like last Monday, we tell them to put on the patch _NOW_. 

Yeah, which they do neither of.

[iago]

Your crazy Newby if you think someone actually installs all the security updates and jazz by hand for companys.  You do it once, make an image of that harddrive, and then just use that image on all the other ones.

Or you use tools like CA Unicenter or WSUS or others. 

For patching corporations, the problem isn't actually rolling out the patches, it's compatibility issues.  Windows patches tend to do things that Microsoft doesn't tell us, and occasionally it conflicts with installed software.  So before patches are rolled out, they have to be tested.  That leaves a window for worms.  As soon as we see an exploit, we tell them to hurry up and get the patch out.  If we see a worm, like last Monday, we tell them to put on the patch _NOW_. 

Yeah, which they do neither of.

Which "they" are you talking about?

If you mean the people we tell to patch, then yes, it gets done.  Being in a security department, we have some level of influence.

[Screenor]

Your crazy Newby if you think someone actually installs all the security updates and jazz by hand for companys.  You do it once, make an image of that harddrive, and then just use that image on all the other ones.

Or you use tools like CA Unicenter or WSUS or others. 

For patching corporations, the problem isn't actually rolling out the patches, it's compatibility issues.  Windows patches tend to do things that Microsoft doesn't tell us, and occasionally it conflicts with installed software.  So before patches are rolled out, they have to be tested.  That leaves a window for worms.  As soon as we see an exploit, we tell them to hurry up and get the patch out.  If we see a worm, like last Monday, we tell them to put on the patch _NOW_. 

Yeah, which they do neither of.

Which "they" are you talking about?

If you mean the people we tell to patch, then yes, it gets done.  Being in a security department, we have some level of influence.

I was talking about Microsoft, and their updates.