Windows 7 Reintroduces Remote BSoD

David Gerard writes "Remember the good old days of the 1990s, when you could teardrop attack any Windows user who'd annoyed you and bluescreen them? Microsoft reintroduces this popular feature in Windows 7, courtesy the rewritten TCP/IP and SMB2 stacks. Well done, guys! Another one for the Windows 7 Drinking Game."

Not a problem.

[onion2k]

It's incredibly unlikely to ever affect anyo

I knew Windows 7 was too good to be true

[commodore64_love]

- Shiny-new interface.
- No annoying "are you sure" popups every 30 seconds like Vista.
- Can run on a 1 gigabyte machine without slowing to a crawl.

It simply wasn't possible for Microsoft to make such a great perfect OS without including a flaw.

Re:Big wow

[mdm-adph]

Yeah, we read the first three lines of the Wikipedia link, too.

Ahh, nice to see ...

[UncHellMatt]

...that my fellow Boston Public School graduates are writing for seclists.org.

Section V: "An attacker can remotly crash without no user interaction, any Vista/Windows 7 machine with SMB enable. "

Yes, because we been done had seen that explot in the pasts.

Dear $DEITY, are there no proof readers or editors alive on these sites?

Re:First Post

[Rik Sweeney]

Let me Loony Tunes that up for you:

Wabbit Season!
Duck Season!

Wabbit Season!
Duck Season!

Re:Not consistent

[DoofusOfDeath]

Having actually tried this on three windows 7 machines now, ...

You must be popular with your coworkers.

Re:Big wow

[Anonymous Coward]

No we didn't. Shut up.

Re:Please grow up, you're driving us away

[Anonymous Coward]

Dammit Dad, you're such a buzzkill.

Re:First Post

[Anonymous Coward]

Or to be more apt (for slashdot)... some people prefer Ford, some prefer Dodge, others still prefer Toyota. Gas is better for some applications, while Diesel is better for others, while electric is better for others.

When a new car line comes out, new defects are to be expected on occasion. Sometimes there are even defects present that were fixed in previous models.

Re:Local?

[Anonymous Coward]

Digital cameras make for plenty of things worth finding.

Re:Local?

[poetmatt]

well, now I know how to win any lan party contests :)

Re:Local?

[GameMaster]

NOBODY EXPECT ATTACKS FROM INSIDE YOUR LAN!!!! Their chief weapon is surprise...surprise and fear...fear and surprise.... Their two weapons are fear and surprise...and ruthless efficiency.... Their *three* weapons are fear, surprise, and ruthless efficiency...and an almost fanatical devotion to rms.... Their *four*...no... *Amongst* their weapons.... Amongst their weaponry...are such elements as fear, surprise.... I'll come in again.

Re:Local?

[GameMaster]

Of course, the proper remedy for this (given that it is on a LAN) is to get up, walk down the hall, and beat the crap out of the douche-bag who's DoSing you. Really, the only reason DoS attacks work so well on the Internet is that the guys doing it are probably half-way around the world.

Re:Please grow up, you're driving us away

[Anonymous Coward]

Don't act as if users of other operating systems are less intelligent than you

Everyone knows using linux makes you smarter. If any, it'l learn you how to use google. Better even: it'l learn you how to use google without a graphics or network adapter working on your box.

(if you think this is a flame, think twice.)

Re:"RE"-introducing?

[David Gerard]

Yeah, reading error on my part. Sorry about that. Let's give Vista credit where it's due!

Re:Ahh, nice to see ...

[gclef]

It's the full-disclosure mailing list....be happy it's not in leet.

Re:For all who want a more technical summary of TF

[Kompressor]

When this packet hits a pocket on a socket on a port,
Your whole damn OS pauses to abort...

SMB2 exploits

[navyjeff]

My favorite SMB2 exploits are detailed here. [gamefaqs.com]

Re:"RE"-introducing?

[David Gerard]

But Macs cost too much, and Linux is too hard. And Microsoft only hits me because he loves me.

Call me an asshole

[DaMattster]

But I have fond memories of the exploit called Win Nuke to cause the BSOD. Back in the day, I was a freshman in college and a football player on our floor was continuously giving me a hard time. In those days, we telnetted into the DEC Alpha to check our email. Also, in those days our IPs were statically assigned and we had no firewall. Those were quite obviously better, more trusting days of the internet. Anyhow, one day I waited until I knew he was in his room and checking email from his computer. I used finger on UNIX to get his IP address. Then, nuke away! I could here him banging, cussing, and throwing his stuff around. So, whenever I needed a little fun, I simply delivered that little exploit. One day he came back from a drunken binge and went to check his email and I felt it was a perfect time to test his patience level. After carefully delivering the little packet, I heard a smashing sound. My guess is he decided to do a body slam, WWF style, on his PC. As I walked by I casually asked what happened as I saw the computer smashed to smithereens. He told me to, "Get outta here, shit nugget!" It was all I could do to keep from bursting out laughing. Moral: Leave the IT guy alone.

Re:The SMB2 flaw is very easy to fix!

[daveime]

Why does the file sharing system in Windows rely on the cartoon baddie from Mario games ? Bowser, srsly ?

Re:The SMB2 flaw is very easy to fix!

[Anonymous Coward]

Well, it is SMB.

Re:Idiot

[omb]

Userland should __NEVER__ be able to crash the OS, M$ fanbois are the reason Windows is as bad as it is! If this was Linux a patch would be issued in hours. See the deref 0 with page 0 mmaped exploit.