Another reason not to use Microsoft lookalike stuff.

Hey drop us a line about the show. Feel free to ask questions, provide feedback and criticism, or just ramble on about anything your little heart desires.

Moderators: snarkout, Patrick, dann

Post Reply

User avatar
dann
Site Admin
Posts: 1132
Joined: Mon Apr 26, 2004 10:55 pm
Location: Hampton, Va, USA
Contact:

Re: Another reason not to use Microsoft lookalike stuff.

Post by dann » Wed Apr 22, 2009 10:54 am

.Net-Sploit allows a hacker to modify the .Net framework on targeted machines, inserting rootkit-style malicious software in a place untouched by security software and where few security people would think to look, said Erez Metula, the software security engineer for 2BSecure who wrote the tool.
I don't understand this statement. Who make security software that does not monitor the entire system. How is there places that people would not think to look? Who the hell is piloting this sinking ship?

What the hell do all these security companies do with the revenues from their overpriced software that they are not on top of this kind of crap? And I thought MS was going to be more security oriented.

Well the good news is you already have to have exploited the machine to launch the payload. The bad news is that is not too difficult.

User avatar
dann
Site Admin
Posts: 1132
Joined: Mon Apr 26, 2004 10:55 pm
Location: Hampton, Va, USA
Contact:

Re: Another reason not to use Microsoft lookalike stuff.

Post by dann » Wed Apr 22, 2009 10:54 am

I wonder if the mono team will incorporate this exploit so they are compliant with MS's .net stack.

User avatar
riddlebox
Posts: 86
Joined: Mon Jul 03, 2006 2:09 pm
Contact:

Re: Another reason not to use Microsoft lookalike stuff.

Post by riddlebox » Mon Apr 27, 2009 3:15 pm

dann wrote:I wonder if the mono team will incorporate this exploit so they are compliant with MS's .net stack.

bahhhhhhahahahaha
You just made me laugh on a crappy day at work.
Thanks dann!

Post Reply