DRM Gone Bad: Microsoft Windows

September 28, 2010 -

Microsoft has been a strong proponent of digital rights management - especially in its windows operating system - but a recent report on PC World reveals an exploit that uses the very protections the company put in place against users. The exploit involves the msnetobj.dll library, an ActiveX Network Object. The msnetobj.dll library "is intended to prevent the owner of a computer from saving or viewing certain files except under limited circumstances, and to prevent the computer's owner from disabling" the library, according to BoingBoing.

Hackers have figured out that the library is useful for attacking computers. Apparently, the file is susceptible to three different attacks - denial of service, buffer overflow, and integer overflow. These attacks can be triggered when the user is lured to a malicious website set up to exploit the file's weakness. Once in, the site can then allow a hacker to run malicious software on the target machine.

Source PC World, Boing Boing

Posted in

Comments

Re: DRM Gone Bad: Microsoft Windows

When are they gonna phase out ActiveX? It's been nothing but a hole you could drive a tank through.

Re: DRM Gone Bad: Microsoft Windows

I doubt its as much as DRM gone bad but rather complete ineptitude on MSs part to build a easy to use functional rights system that is backed up by a online community. MS shat on it since they are to busy screwing up the 360.....


I have a dream, break the chains of copy right oppression! http://zippydsmlee.wordpress.com/2010/05/21/cigital-disobedience/


Copyright infringement is nothing more than civil disobedience to a bad set of laws. Let's renegotiate them.

---

Patreon

Deviantart

Re: DRM Gone Bad: Microsoft Windows

Pretty much the word "ActiveX" is all the explanation anyone should need.

Re: DRM Gone Bad: Microsoft Windows

My first thought was "An ActiveX exploit? NO! That certainly would never happen!"

Re: DRM Gone Bad: Microsoft Windows

Wow, Microsoft better fix this up before shit hits the fan.

http://www.magicinkgaming.com/

Re: DRM Gone Bad: Microsoft Windows

I doubt they'll go out of cycle for this one; expect a patch on Tuesday the 12th.

 
Forgot your password?
Username :
Password :

Poll

Which group is more ethically challenged?:

Shout box

You're not permitted to post shouts.
Matthew Wilson@info depends on the sector. for example, have you looked at how powerful unions are in the public sector? I will make the argument they have too much power in that sector.07/07/2015 - 12:39pm
InfophileIt's easy to worry about unions having too much power and causing harm. The odd thing is, why do people seem to worry about that more than the fact that business-owners can have too much power and do harm, particularly at a time when unions have no power?07/07/2015 - 12:31pm
Matthew Wilsonthe thing is unions earned their bad reputation in the US. the way unions oparate the better at your job you are, the likely you want to be in a union.07/07/2015 - 11:33am
InfophilePut that way, "right to work" seems to have BLEEP-all to do with gay rights. Thing is, union-negotiated contracts used to be one of the key ways to prevent employers from firing at will. Without union protection, nothing stops at-will firing.07/07/2015 - 11:06am
Infophilehas an incentive to pay dues if they're represented either way, so the union is starved for funds and dies, unless things are bad enough that people will pay dues anyway.07/07/2015 - 11:02am
InfophileFor those who don't know, "right to work" laws mean that it can't be a condition of an employment contract that you pay union dues. That is, the right to work without having to pay dues. Catch is, unions have to represent non-members as well, so no one...07/07/2015 - 11:01am
MechaCrashUnexpected? Seriously?07/07/2015 - 10:55am
Mattsworknamejob they wanted without the unions getting involved. The problem is, it has some unexpected side effects, like the ones Info mentioned07/07/2015 - 8:49am
MattsworknameThe problem being, right to work states exsist specificly as a counter to Unions, as the last 20 or so years have shown, the unions have been doing this countries economoy NO favors. The right to work states came into being to allow people to work any07/07/2015 - 8:49am
Infophile(cont'd) discriminatory. This can only be done for protected classes which are outlined in law (race, sex, religion, ethnicity everywhere, sexual orientation in some states). So, a gay person could be fired because they're gay and have no recourse there.07/07/2015 - 7:27am
Infophile@Goth: See here: http://www.snopes.com/politics/sexuality/firedforbeinggay.asp for a good discussion on it. Basically, the problem is that in the US, most states allow at will firing, and it's the burden of the fired person to prove the firing was ...07/07/2015 - 7:25am
Goth_SkunkAssuming that's true, then that is a fight worth fighting for.07/07/2015 - 6:58am
Yuuri@ Goth_Skunk, in many states being gay is not a protected status akin to say race or religion. It's also in the "Right to work" states. Those are the states where one can be fired for any reason (provided it isn't a "protected" one.)07/07/2015 - 6:07am
Goth_Skunkregarded as a beacon of liberty and freedom that is the envy of the world, would not have across-the-board Human Rights laws that don't at the very least equal those of my own country.07/07/2015 - 5:47am
Goth_SkunkI find that hard to believe, Infophile. I have difficulty believing employers can *still* fire people for being gay. I would need to see some evidence that this is fact, because as a Canadian, I can't believe that the United States,07/07/2015 - 5:46am
InfophileFor that matter, even women don't yet have full legal equality with men. The US government still places limits on the positions women can serve in the military. And that's just the legal side of things - the "culture wars" are more than just laws.07/07/2015 - 5:43am
InfophileAnd that's just LGB issues. Get ready for an incoming battle on rights for trans* people. And then after that, a battle for poly people.07/07/2015 - 5:41am
InfophileA battle's been won. In many states employers can still fire people for being gay. And in many states, parents can force their children into reparative therapy to try to "fix" being gay. Those battles still need to be fought.07/07/2015 - 5:40am
Goth_Skunkand now they've switched to battles that don't need to be fought.07/07/2015 - 5:37am
Goth_SkunkIn my opinion, it was the final legal hurdle denying homosexual couples final and recognized statuses as eligible spouses. But even though this war's been won, some people are still too keen to keep fighting battles,07/07/2015 - 5:28am
 

Be Heard - Contact Your Politician