Controversy Surrounds Huge IE Hole

Suchetha wrote in with a Wired News bit talking about security hole in IE that allows malicious web pages to reformat a hard drive. The Wired talks more about bugtrack's handling of the whole thing, and how it essentially posted working code for the exploit. Was it irresponsible or not?

holy crap

[Protege108th]

thats freakin crazyness.....hmmm wheres that mozilla download site again...

The Wired, huh?

[Millennium]

The Wired talks more about bugtrack's handling of the whole thing...

Dude; since when did Lain start writing technical articles?

Ahhh... but

[ShieldW0lf]

Can it install Linux on the hard drive after it has formatted it?

I thought it was fine till...

[Emugamer]

I clicked on the link, and now had to post this comment under linux...

Still no loss, it was only a win98 machine

The preceding was a paid joke made possible by the humorless grant institutions of America

Thanks

[DigitalDragon]

Thanks for not posting a link to that page.

well..

[Sacarino]

What may be MORE irresponsible is /. posting a link to Wired posting a link to the exploit for all the l33t script kiddies here.

No, wait... there's no script kiddies here. Only hax0rz with K-rad XP boxen.

A link to a working exploit

[Anonymous Coward]

here [goatse.cx]

If you think that is an annoying bug, try this:

[viper21]

http://www.onid.orst.edu/~boyechky/open.html [orst.edu]

I would rather have my hard drive formatted. -S

huge hole...

[mr_gerbik]

The only huge hole I've seen in IE is at goatse.cx...

-gerbik

Re:Yes!!!

[AresTheImpaler]

It might be my sadistic side, but I prefer for working exploits to be posted by the security sites... It gives you a way of checking to see if you are vulnerable. In the case of M$ bugs, it also puts more pressure on the company to come up with a fix for the problem quickly.

Right in the point man. Now, I'm running the code right now to see if im vulne

This Linux's big chance!

[jvmatthe]

"Showing people how to automatically format hard disks from a Web page isn't 'full disclosure,'" Smith said. "It is malicious code writing."

Now all we need is a way to embed an ISO image of a Linux system into the web page and use the same exploit to install an alternative operating system. Just think of the banner ads! "Click here to Install Linux!" and "Get That Windows Monkey Off Your Back! Hit the Monkey to Try!" and "Eliminate Windows Instabilities Forever. Click Now!". Then it won't be malicious. It'll be setting all those people FREE! ;^D

Where's the Mac version of the exploit?

[toupsie]

I just tried using the exploit code on my Mac OS X box running Internet Explorer and it didn't work. My hard disk was not formatted. I am disappointed. Why is Microsoft treating Mac users different than Windows users? Its not often that Mac OS X users get to use those nice 'Recovery CDs' that get shipped with Macs. We pay top dollar for our computers, we might as get to use everything that comes with them. Thanks a lot Microsoft! Just for leaving me out, I'm switching to Mozilla where are all the security problems and bugs [slashdot.org] are cross platform!

If you use windows, post your IP address here.

[teamhasnoi]

I...uh...want to see if they are...are as numerically diverse as mine! Yeah..that's it!

nastiness

[Ainu]

Lets see.. this exploit combined with a bind exploit equals a huge nuber of "windows updates".

Re:Irresponsible?

[ahaning]

ssh into your box, su to root, then fsck your harddrive

I wouldn't be so pissed as long as the attacker did this often. It's such a hassle to wait for my system to do a monthly e2fsck when the partitions have readched their maximal mount count.

Another Link

[sdjunky]

Here's some more info... click this link [dotomycomputer] it's ok.. you can trust it... go on.. you know you want to.

Nothing to fear. Just a link.

malicious spam!

[dethl]

Screw virus'..this is perfect...send your victim an email with a link to your exploited page, and boom! And to think this is all possible thanks to M$!
New M$ motto: we fuck up so you have to!

What luck!

[Alizarin Erythrosin]

Microsoft is sending some of their people here tonight to give a talk about how cool they are and how fun it would be to work for them (recruitment meeting). I think I'll mention this exploit to them and see what their response is.

The joke they always make is "For those of you who want to work in software testing... Yes, we do test our products (wait for laugh)"

Re:Yes!!!

[GenericJoe]

Yeah, but now you *aren't*

It's a self-fixing exploit!

New distributed client built in to Windows!

[teamhasnoi]

Microsoft(TM) Press Release 11-19-02

Microsoft(TM) intrudes^w introduces an incredible new PR nightmare^w^w way to work(TM)!

Trojaned@Home(TM) - work on any problem you want(TM)! Set millions of CPUs working at a moment's notice(TM)! Every copy of Windows(TM) has this glaring security hole(TM)^w^w^w feature(TM) built in!

Trojaned@Home(TM) is super fast, due to Microsoft(TM)'s secret Code Hider^w Layering(TM) technology, which ensures that it's always on(TM), and ready to work for you(TM)!

See the power of the internet(TM) multiplied by millions(TM) of smart Windows(TM) users today!

Use Trojaned@Home(TM)!

Ha! You already are(TM)!

Dissapointing WINE performance

[sonra]

Found the code, made a web page and verified the exploit with ie5 win200...
Tried it on WINE using CrossOver Office.
and was very disappointed to find that WINE once again did not live up to it goal of being bug for bug compatible with windows.

All i got was HTML help and a script error. No files written to my "C:" and no exploit.

*sigh* Guess WINE still needs some work.

Patch

[arestivo]

You can get a patch here [mozilla.org].

Re:BAD BAD BAD! Why? Now the script kiddies have i

[adb]

Right, because script kiddies don't hang out on IRC and get this stuff before Bugtraq. Also, the sky is not blue and there is no porn on the internet.

Re:Ahhh... but

[Anonymous Coward]

Can it install Linux on the hard drive after it has formatted it?

You might think you're joking, but there would be no better way to get microsoft to quickly fix this than to create a web page that downloads a debian install floppy and starts up a network install :-)

User: Hmmm, my computer is acting subtly different, oh well...
MS: Oh no, we've lost another one!

:-)

Of course it's responsible.

[Anonymous Coward]

People who use IE obviously *like* living dangerously. If they didn't, they wouldn't be using IE, would they?

Oh, wait, you think that they don't *know*? Pshaw! They're like the people who choose to drive SUVs like a sports-car -- they may _say_ that they don't know, but either they do, and are lying, or they don't, and are stupid. Either way, the responsibility likes with the user.

There are enough people out there pointing out that IE and Outlook are broke and dangerous that there's no reasonable way anyone can think they they aren't. Except if they put their fingers in their ears and go "LalalalalaIamnotlisteninglalalalala" whenever the subject comes up.

The IE users who get hit by this exploit should suck it up and take responsibility for their risky actions. And have a good backup system in place, of course.

Re:Where's the Mac version of the exploit?

[BlackBolt]

I agree. Microsoft often ships their Mac versions with far less features. I mean, Microsoft is known for having lots of features in their products, but they seem unable or unwilling to share all of these features with Mac users. I guess the best features are Windows only. :-(

I did manage to format my Virtual PC drive after some work, but I still feel like a second-class citizen. Bah. People always say there are more fun games on Windows, and it's true - I haven't had a chance to reformat once, and that Virex thing is a waste of money. On Windows, my antivirus was like a Tamagotchi, always pestering me and needing to be taken care of. With a Mac, it just sits there like it's in a coma.

I used to love my weekly Win98 formats. I got so darn good at them.

BlackBolt

Re:Shooting the messenger ..

[xrayspx]

Go ahead, shoot Messenger. It's had its fair share of bugs too...

Whoopsie [com.com]
Daisy [tom.me.uk]

Re:Where's the Mac version of the exploit?

[toupsie]

and that Virex thing is a waste of money.

I thought it was a waste of money until I scanned all the M$ Office documents sent to me by Windows users. About 60% had macro viruses on them. Of course, I never noticed before and it never effected my system, but it was nice to clean out the 'Windows Cooties' from my Mac.

Re:This Linux's big chance!

[driftwood]

Now all we need is a way to embed an ISO image of a Linux system into the web page and use the same exploit to install an alternative operating system. Just think of the banner ads! "Click here to Install Linux!" and "Get That Windows Monkey Off Your Back! Hit the Monkey to Try!" and "Eliminate Windows Instabilities Forever. Click Now!". Then it won't be malicious. It'll be setting all those people FREE! ;^D

You look around, what do you see? Businessmen, teachers, lawyers, carpenters. The very minds of the people we are trying to save. But until we do, these people are still a part of that system and that makes them our enemy. You have to understand, most of these people are not ready to be unplugged. And many of them are so inert, so hopelessly dependent on the system, that they will fight to protect it.

Apologies to the Wachowski brothers.

Re:If you use windows, post your IP address here.

[nzhavok]

207.46.134.155 [207.46.134.155]

Hello footpad!

[Chris Pimlott]

Under the rug there's a trapdoor leading to the apartment below me.

Give up, it's hopeless. Believe me, I tried. Even if you board up all the doors, someone'll still find a way to sneak in through the kitchen window you left ajar and clean out all the treasures in you trophy case. You just can't win.

Re:Irresponsible?

[jdreed1024]

If Linux had an exploit that allowed someone to ssh into your box, su to root, then fsck your harddrive ...

Are you kidding? If someone wants to fsck my drive for me, that's fine with me. It'll cut down on my boot time.

Re:Active content...

[Jucius Maximus]

"How about encouraging users to use browsers that don't suck [mozilla.org]?"

Sometimes encouragement is not necessary. I installed mozilla on my sister's machine, changed the IE link on the desktop to link to mozilla (but still with the blue 'e' icon) and installed an IE-lookalike skin [mozdev.org] on mozilla and she hasn't noticed the difference yet. (It's been about a month now.)

Re:No!!!

[Anonymous Coward]

Only on /. would somebody say that a widespread exploit that deletes millions of people's files is a "very good thing".

Wake up you retard.

Thanks for the Help Microsoft!

[litewoheat]

So I figured that I could avoid this by just deleting the key in my registry for IE help so that the OCX would never load and the exploit wouldn't work. I did that and it solved the problem! But wait... Windows is now trying to "help" me by putting that registry key back the way it was! Thank you so much Windows for saving me from myself and reopening the door to my harddrive. What would I do without you?

Re:Yes!!!

[lowe0]

If it wasn't funny, then why did I laugh?

Re:Another Link

[_ph1ux_]

send this to people with the subject:

Want to take a break? Click here - and see how you can have a much deserved break from work right now!

Malicious?

[njdj]

security hole in IE that allows malicious web pages to reformat a hard drive

Surely there's a typo here. If I discover that the computer I'm working on has Windows installed, you're saying that all I need to do to reformat the hard drive is click on one of these web sites?

Re:Of course it was irresponsible

[wirelessbuzzers]

Wonder how you'd feel when the People's Movement For Some Obscure Cause vaporize your town based on those plans...

Well, I'd probably feel pretty vaporized. But not much more than that.

Re:Of course it was irresponsible

[Glytch]

I would be scared shitless if medical equipment or air traffic radar systems were run by anything but a realtime, custom designed system. Which Windows isn't. What are you smoking, troll?

Re:Of course it was irresponsible

[Pyrometer]

What's a worse situation? A bug that goes completely unnoticed by the general population, but is quietly exploited for months by hackers that have done their homework....or...maybe a few more script kiddies find out about it but now Joe Public is WELL aware of it, due in no small part to the discussions that happen on boards like this.

Riiighhhhtttttt ... so "Joe Public" is reading /. and Wired now is he(/she)? :)

Re:Of course it was irresponsible

[CableModemSniper]

Yes, right after I emailed him and told him too. Computer geeks, defend your computer-illeterate friends! Save them form themselves! :)

What's next?

[Rai]

IE bugs can format a hdd now. What's next? A bug that will literally kill you in your chair.

Actually, that might make msgboard moderation a lot easier. Die, troll! :)

Hmmm... not a problem at all..

[IdleTime]

First of all, stay away from MS products.. Check!

Second, don't visit unknown links... Check!

Third, Disable pop-ups, block what can be blocked in the browser. Check!

Fourth, upgrade your OS with the latest patches and fixes, (Gentoo here, emerge -u world)... Check!

Fifth, implement a nazi firewall... Check!

Looks good so far, have never had an attack or lost data due to a security hole. I can sleep in peace.

new bug found: Humans vulnerable to bullets

[Cynikal]

now lets give everyone working guns so we can force smeone to come out with a fix for this exploit

Re:Of course it was irresponsible

[Anonymous Coward]

You will have a hard time proving this, because all of your data would be gone...