Tech Support > Operating Systems > Microsoft ordered to pull 'misleading' security ad
Microsoft ordered to pull 'misleading' security ad
Posted by Jim Richardson on February 14th, 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 14 Feb 2004 10:00:00 +0100,
Peter Köhlmann <Peter.Koehlmann@t-online.de> wrote:

I'd be interested to hear about the several high profile exploits of
Oracle that Erik claims to know about.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFALfA9d90bcYOAWPYRAkaYAKCiJepoZHcX6yZTHIjogP /+g4SvBACg2+Ox
WCSCt2Tu3b5s1cY0u5B2bsk=
=onG4
-----END PGP SIGNATURE-----

--
Jim Richardson http://www.eskimo.com/~warlock
"Even if you can deceive people about a product through misleading statements,
sooner or later the product will speak for itself." - Hajime Karatsu

Posted by Peter Köhlmann on February 14th, 2004


Jim Richardson wrote:

I am quite certain there will never be anything forthcoming from Erik. He
always claims this bullshit and then fails to deliver any references.
In other words, he is just lying, just as in

Dozens of root exploits each month
Linux can't boot from (insert fs here)
Ext3 has to have its log on the same fs
Mutt, Pine and Netscape had several similar exploits like OE
The Morris worm spread by email

And many more

Erik has set a record here as the one poster where you have to assume from
the get go that he is just lying again
--
Microsoft's Guide To System Design:
If it starts working, we'll fix it. Pronto.


Posted by paul cooke on February 14th, 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jim Richardson wrote:

I wouldn't, because that would be allowing Erik to divert the thread to fit
with his agenda.

- --
COMPUTER POWER TO THE PEOPLE! DOWN WITH CYBERCRUD!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFALfWgNclAUt2HMX8RAoIrAKCpngDpHZpYdJFRsEa/WFzFgBZDNACgmzNb
UAQgjBignpP2PMxecfWBbHs=
=tAsw
-----END PGP SIGNATURE-----

Posted by Peter Köhlmann on February 14th, 2004


paul cooke wrote:

It would allow him to divert /part/ of the thread *if* he could prove his
claims. I am quite certain that he can't and for this reason I am very
interested in his URLs
--
Experience is what causes a person to make new mistakes instead of
old ones.


Posted by Sinister Midget on February 14th, 2004


On 2004-02-14, Jim Richardson <warlock@eskimo.com> blubbered:
I'm guessing that if you guys keep after him about it, GPF should be
back in a few days to like linux for us.

--
Microsoft's relationship to its users is that of the blue whale to
krill. Our only purpose is to breed, feed and get squeezed against its
giant tongue until every last drop of money is released.
-- Rupert Goodwins, ZDNet(UK)

Posted by Erik Funkenbusch on February 14th, 2004


On Sat, 14 Feb 2004 10:00:00 +0100, Peter Köhlmann wrote:

http://www.eweek.com/article2/0,4149,1405321,00.asp
http://www.nextgenss.com/advisories/oraplsextproc.txt
http://ciac.llnl.gov/ciac/bulletins/l-108.shtml
http://www.safermag.com/html/safer33/alerts/25.html

BTW, "several" can mean "more than one" per the dictionary:

http://www.m-w.com/cgi-bin/dictionar...ary&va=several

2 a : more than one <several pleas>

Posted by Milo T. on February 14th, 2004


On Sat, 14 Feb 2004 01:00:54 -0800, Jim Richardson wrote:

The South African Advertising Standards Agency, and whoever it was who
complained to them.
--
People in the killfile (and whose posts I won't read) as of 2/14/2004
12:21:24 PM:
Peter Kohlmann, T.Max Devlin. Matt Templeton (scored down)

Posted by Peter Köhlmann on February 14th, 2004


Erik Funkenbusch wrote:

Fine. OpenSSL. Which did not just affect Oracle, but *everyone* using it.

While bad, it was only dangerous if the network admin had not done his job
and configured the firewall correctly

Same as above. High risk, *if* network admin is not doing his job

and read files that may be restricted and/or sensitive. It could also lead
to a remote user gaining local access, and an elevation of privileges.

Notice, *could* lead to. Otherwise, could get read access to files

So you found 1 bug in OpenSSL which is *not* Oracle specific
2 bugs which were serious but *only* when network admin did not do his job
and 1 bug which seems not too serious.
Congrats, Erik. I still would trust Oracle *lots* more then any MS garbage

So you found a dictionary which supports your "several" definition. Fine for
you. I still don't buy it

--
Microsoft's Guide To System Design:
Flakey and built to stay that way.


Posted by Mark Allen Adams, Jr. on February 14th, 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I got stuck in a bank vault once. MS was considerably easier to get away
from.

- --
mark allen adams, jr.
usenet (at) mark (hyphen) adams (dot) com
fix the e-mail address to reply

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFALok4nkcACrrIBtgRAsKsAKCRYziQSLSgb9KrtDZ/Qyo3b/ly7gCdHPQr
rrk3aLsJIzIogW1xac6EREU=
=XVIh
-----END PGP SIGNATURE-----

Posted by Bo Grimes on February 14th, 2004


On Sat, 14 Feb 2004 20:20:03 GMT, "Milo T." <fantastical@malaprop.net>
wrote:

How do you know Oracle even ran its "Unbreakable" ad in South Africa?

Bo G


Posted by Erik Funkenbusch on February 14th, 2004


On Sat, 14 Feb 2004 20:55:03 GMT, Bo Grimes wrote:

http://za.sun.com/solutions/unbreakable9i/
http://www.idgnews.net/intl/internat...C?OpenDocument
http://www.itweb.co.za/office/Oracle/0304091044.htm

Posted by Milo T. on February 14th, 2004


On Sat, 14 Feb 2004 20:46:53 GMT, Mark Allen Adams, Jr. wrote:

I'm not surprised. After all, it's not physically possible for you to get
stuck inside Microsoft software. I'm hard pressed to even come up with a
metaphorical equivalent.

Your logic, not so bright, huh?
--
People in the killfile (and whose posts I won't read) as of 2/14/2004
1:37:26 PM:
Peter Kohlmann, T.Max Devlin. Matt Templeton (scored down)

Posted by Johan Lindquist on February 14th, 2004


So anyway, it was like, 22:38 CET Feb 14 2004, you know? Oh, and, yeah,
Milo T. was all like, "Dude,
You absolutely, categorically, will not ever see the humour in /any/
comment that's even bordering on having ms at the butt end of it, no?
You must be having a terrible time in this forum.

--
Time flies like an arrow, fruit flies like a banana. Perth ---> *
22:50:38 up 21 days, 6:27, 6 users, load average: 2.19, 2.08, 2.03
$ cat /dev/bollocks "echo y | format c:" Registered Linux user #261729
enhance 24/7 relationships

Posted by Jim Richardson on February 14th, 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 14 Feb 2004 20:20:03 GMT,
Milo T. <fantastical@malaprop.net> wrote:

And Erik is whining about that *here*? why?

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFALqaWd90bcYOAWPYRAk98AJ42zKrf+Uqr5ocSVgCFjM ew7loBNwCg8NXD
YPo3IcJQbDffyLcaYJ9dg/0=
=TXHm
-----END PGP SIGNATURE-----

--
Jim Richardson http://www.eskimo.com/~warlock
Taxes are not levied for the benefit of the taxed. -- Lazarus Long

Posted by Kirk Morris on February 15th, 2004


On Sat, 14 Feb 2004 22:51:54 +0100, Johan Lindquist wrote:

He has a terrible time with life in general. That's why Windows seems
'normal' to him.

He protects Microsoft like most people protect their mother.

God only knows why.

--

Corollary to Clarke's Third Law:
Any technology distinguishable from magic is insufficiently advanced.

Posted by Kirk Morris on February 15th, 2004


On Sat, 14 Feb 2004 21:12:25 +0000, Erik Funkenbusch wrote:

This is merely a link to Sun's own site.

In Johannesburg, they are seriously discussing the use of Open Source.

This has nothing to do with Africa. It's just a note from a
Johannesburg paper about the London announcement.. "Oracle has announced
its Unbreakable Linux Partner Initiative in London today, the next step
in Oracle's Unbreakable Linux campaign..."

Where's the actual ad, Erik?
--

Corollary to Clarke's Third Law:
Any technology distinguishable from magic is insufficiently advanced.

Posted by Milo T. on February 15th, 2004


On Sat, 14 Feb 2004 20:36:21 -0500, Kirk Morris wrote:

Yes. The South African version. Look at the first part of the URL.
--
People in the killfile (and whose posts I won't read) as of 2/14/2004
9:41:02 PM:
Peter Kohlmann, T.Max Devlin. Matt Templeton (scored down)

Posted by Milo T. on February 15th, 2004


On Sat, 14 Feb 2004 14:52:06 -0800, Jim Richardson wrote:

You did read the story linked to in the post you're replying to, right?
--
People in the killfile (and whose posts I won't read) as of 2/14/2004
9:41:26 PM:
Peter Kohlmann, T.Max Devlin. Matt Templeton (scored down)

Posted by Milo T. on February 15th, 2004


On Sat, 14 Feb 2004 22:51:54 +0100, Johan Lindquist wrote:

Oh, I'm sorry... is that a requirement? To find everyone's posts funny,
even when the jokes are hackneyed, lame, or just rehashing old material
that's been done to death a million times here?

I don't see a similar requirement for everyone else to find digs at Linux
funny... in fact, I've been called to account for a large number of them.
So since when do I have to do anything, Johan?

Stop treating me differently to everyone else in this newsgroup. And stop
being so damn biased.
--
People in the killfile (and whose posts I won't read) as of 2/14/2004
9:43:24 PM:
Peter Kohlmann, T.Max Devlin. Matt Templeton (scored down)

Posted by Milo T. on February 15th, 2004


On Sat, 14 Feb 2004 20:24:46 -0500, Kirk Morris wrote:

You do the same with Linux, Kirk. God only knows why.
--
People in the killfile (and whose posts I won't read) as of 2/14/2004
9:47:38 PM:
Peter Kohlmann, T.Max Devlin. Matt Templeton (scored down)