InfoAnda - Microsoft says hacking code could have leaked |

Pakistanis angry over detentions in Times Sq. case
Monday, May 24, 2010
ISLAMABAD – Relatives of three men detained by Pakistan for alleged links to the suspect in the attempted Times Square bombing say the men are innocent.
They

Taiwan denies boycotting Australian film festival
Thursday, August 6, 2009

AFP - Thursday, August 6TAIPEI (AFP) - - Taiwan's Beijing-friendly government on Wednesday denied boycotting an Australian film festival amid a row over the e

Merkel's support dips, regional ally resigns International
Thursday, September 3, 2009

By Sarah Marsh and Noah Barkin

BERLIN (Reuters) - Chancellor Angela Merkel suffered a double blow on Thursday as a senior party ally in east German

Minister seeks closure of anti-Berlusconi websites
Wednesday, December 16, 2009
ROME (AFP) - – The Italian government moved Tuesday to close down Internet sites encouraging further violence against Prime Minister Silvio Berlusconi, who

Asian markets mixed after Wall Street rally
Wednesday, March 18, 2009

By ELAINE KURTENBACH,AP Business Writer AP - Wednesday, March 18SHANGHAI - Asia's stock market rally seemed to be running out of steam Wednesday, despite an

Israeli Gaza raid kills one as Hamas eyes truce | 2 February 2009
Heidi Klum wows crowd at Victoria's Secret show | 20 November 2009
New Zealand PM sees pacts boosting Vietnam trade | 12 July 2010

G20 to agree IMF funding boost: European source | 14 March 2009

Forum Views () Forum Replies ()

Read more with google mobile : Microsoft says hacking code could have leaked |

Edition: U.S. Africa Arabic Argentina Brazil Canada China France Germany India Italy Japan Latin America Mexico Russia Spain United Kingdom Home Business Business Home Economy Technology Media Small Business Legal Deals Earnings Social Pulse Business Video The Freeland File Markets Markets Home U.S. Markets European Markets Asian Markets Global Market Data Indices M&A Stocks Bonds Currencies Commodities Futures Funds peHUB World World Home U.S. Brazil China Euro Zone Japan Mexico Russia India Insight World Video Reuters Investigates Decoder Politics Politics Home Election 2012 Issues 2012 Candidates 2012 Tales from the Trail Political Punchlines Supreme Court Politics Video Tech Technology Home MediaFile Science Tech Video Tech Tonic Social Pulse Opinion Opinion Home Chrystia Freeland John Lloyd Felix Salmon Jack Shafer David Rohde Bernd Debusmann Nader Mousavizadeh Lucy P. Marcus David Cay Johnston Bethany McLean Edward Hadas Hugo Dixon Ian Bremmer Mohamed El-Erian Lawrence Summers Susan Glasser The Great Debate Steven Brill Jack & Suzy Welch Breakingviews Equities Credit Private Equity M&A Macro & Markets Politics Breakingviews Video Money Money Home Tax Break Lipper Awards 2012 Global Investing MuniLand Unstructured Finance Linda Stern Mark Miller John Wasik James Saft Analyst Research Alerts Watchlist Portfolio Stock Screener Fund Screener Personal Finance Video Money Clip Investing 201 Life Health Sports Arts Faithworld Business Traveler Entertainment Oddly Enough Lifestyle Video Pictures Pictures Home Reuters Photographers Full Focus Video Reuters TV Reuters News Article Comments (0) Follow Reuters Facebook Twitter RSS YouTube Read Lawmakers, film star Clooney arrested at anti-Sudan protest 16 Mar 2012 "Man vs. Wild" star Bear Grylls fired by TV network 14 Mar 2012 Meghan McCain talks sex and politics in Playboy 16 Mar 2012 Kony film director hospitalized after "unfortunate incident" 2:01am EDT Kony video director hospitalized in U.S. after "incident" 16 Mar 2012 Discussed 180 U.S. serviceman detained in Afghanistan over civilian casualties 146 Exclusive: U.S., Britain to agree emergency oil stocks release 127 Sixteen Afghan civilians killed in rogue U.S. attack Watched North Korea flaunts military might Fri, Mar 16 2012 Viral video director hospitalised Fri, Mar 16 2012 Why Apple customers turn a blind eye Fri, Mar 16 2012 Microsoft says hacking code could have leaked Tweet Share this Email Print Related News Wanted computer hacker helps bring charges Tue, Mar 6 2012 Analysis & Opinion Corporate governance: boardrooms fret over corporate espionage and federal guidance regimes The InternetFeds: Inside hacker Sabu’s war room Related Topics Tech » By Joseph Menn SAN FRANCISCO | Fri Mar 16, 2012 7:05pm EDT SAN FRANCISCO (Reuters) - Microsoft's process for sharing information about security vulnerabilities in its products came under fire Friday after a roadmap for exploiting a severe, recently discovered flaw appeared on a hacking website in China. The guideline, known as "proof-of-concept" code, most likely leaked from one the more than 70 security companies that get advance warnings from the company about major new holes, according to the researcher who found the flaw. Microsoft said it was investigating the disclosure and "will take the necessary actions to protect customers and ensure that confidential information we share is protected pursuant to our contracts and program requirements." "The details of the proof-of-concept code appear to match the vulnerability information shared with Microsoft Active Protections Program partners," said Yunsun Wee, Microsoft's director of its Trustworthy Computing effort. Announced in 2008, Microsoft's program alerts security companies to upcoming patches, typically a day before the patches themselves are released. The idea is to give them time to prioritize and test the fixes before installing them to protect their customers. The timing is essential, because once the patches come out, hackers can reverse-engineer them to figure out what problems they solve, then produce tools to break into unpatched systems. The window from patch release to working hacking code has shrunk from months or weeks to days and in some cases hours. Participants in the advance-warning program include most of the largest and many smaller security vendors, including some in China. All promise to keep the information secret. Some security professionals questioned why Microsoft allowed so many into its program, though others said it also would be faulted for hoarding information. The patches for the new hole were distributed on Tuesday, as part of Microsoft's regular monthly cycle for security fixes. The hole is a very serious one, because full exploitation would allow an attacker to control machines running Windows XP and later Windows versions that have Remote Desktop Protocol enabled, as long as the network doesn't demand authentication. The protocol is off by default but turned on by many corporate technologists, who use it to install new programs or fix problems on employee machines. The flaw could be used to spread a worm, meaning that it could hop from computer to computer without users making mistakes such as clicking on a tainted email attachment. Microsoft previously warned companies to install the patches as soon as possible, saying that they expected hacking code to circulate within a month. The researcher who discovered the flaw in May last year, Italian Luigi Auriemma, first submitted his findings and the proof-of-concept to a security group led by Hewlett-Packard's TippingPoint. That group tested and vetted the research and passed it on to Microsoft in August so that the company could develop a patch. Auriemma had been checking to see who would reverse-engineer the patch first, and was startled to find that the first code to circulate was his own. "If the author of the leak is one of the MAPP partners, it's the epic fail of the whole system," Auriemma wrote on his personal blog. Fortunately, the exploit code Auriemma drafted would only shut a PC down, not hand over control to the attacker. Full exploit code has not been seen yet, but security experts said it would likely come more quickly now that the starting point is in the wild. "Windows users should consider themselves on high alert and harden their defenses by patching their PCs as soon as possible, before we see this worm turn even more malicious," Sophos security consultant Graham Cluley wrote on his company's blog. (Reporting By Joseph Menn; Editing by Gary Hill) Tech Related Quotes and News Company Price Related News Tweet this Link this Share this Digg this Email Reprints We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/ Comments (0) Be the first to comment on reuters.com. Add yours using the box above. Edition: U.S. Africa Arabic Argentina Brazil Canada China France Germany India Italy Japan Latin America Mexico Russia Spain United Kingdom Back to top Reuters.com Business Markets World Politics Technology Opinion Money Pictures Videos Site Index Legal Bankruptcy Law California Legal New York Legal Securities Law Support & Contact Support Corrections Advertise With Us Connect with Reuters Twitter Facebook LinkedIn RSS Podcast Newsletters Mobile About Privacy Policy Terms of Use AdChoices Copyright Our Flagship financial information platform incorporating Reuters Insider An ultra-low latency infrastructure for electronic trading and data distribution A connected approach to governance, risk and compliance Our next generation legal research platform Our global tax workstation Thomsonreuters.com About Thomson Reuters Investor Relations Careers Contact Us Thomson Reuters is the world's largest international multimedia news agency, providing investing news, world news, business news, technology news, headline news, small business news, news alerts, personal finance, stock market, and mutual funds information available on Reuters.com, video, mobile, and interactive television platforms. Thomson Reuters journalists are subject to an Editorial Handbook which requires fair presentation and disclosure of relevant interests. NYSE and AMEX quotes delayed by at least 20 minutes. Nasdaq delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.

Other News on Saturday, 17 March 2012
Moldova breaks political gridlock, elects president |
Russian smear documentary provokes protests |
New Daimler factory may help Hungary avoid recession |
Man killed in French mosque attack: police |
Uganda to head new military force to hunt for Kony |
Dell sees room to challenge Apple in tablets |
Radio show on Apple's Chinese workers is retracted |
LightSquared loses network partner Sprint |
Estonia to extradite cyber fraud scam suspect to U.S. |
Nichols' revival of 'Salesman' wows Broadway critics |
Syrian security compounds hit by car bombs: TV |
Afghanistan's Karzai slams U.S. over massacre |
China exerts rare public pressure on North Korea over missile plan |
Chavez back in Venezuela after Cuba surgery |
Mexico, Brazil free trade talks under threat: minister |
IMF warns Palestinians may face cuts without more aid |
Mexican front-runner eyes quick reforms: aide |
Goldman person leaked Apple, Intel secrets: lawyer |
Regulators probe Google privacy breach: report |
Microsoft says hacking code could have leaked |
Radio show on Apple's Chinese workers is retracted |
Huckabee vs Limbaugh: Cumulus aims at Clear Channel |
Huckabee vs Limbaugh: Cumulus aims at Clear Channel |
Meghan McCain talks sex and politics in Playboy |
Lawmakers, film star Clooney arrested at anti-Sudan protest |
Wikileaks' Assange plans to run for Australian parliament-report |
Uganda responds to Kony 2012 video with own video |
Gaddafi spy chief said arrested in Mauritania |
Former Nazi guard Demjanjuk dead at 91: German police |
Ethiopia again attacks rebel targets in Eritrea |
Pakistan parliament set to take up U.S.-Pakistan ties |
Asseco Poland 2011 net falls 4 percent, less than forecasts |
Greece at new risk of being pushed off euro
Bodies of missing Tenn. mom, Jo Ann Bain, and daughter found
Female Breasts Are Bigger Than Ever
AMD Trinity Accelerated Processing Units Now in Volume Production
The Avengers (2012 film), made the second biggest opening- and single-day gross of all-time
AMD to Start Production of piledriver
Ivy Bridge Quad-Core, Four-Thread Desktop CPUs
Islamists Protest Lady Gaga's Concert in Indonesia
Japan Successfully Broadcasts an 8K Signal Over the Air
ECB boosts loans to 1 trillion Euro to stop credit crunch
Egypt : Mohammed Morsi won with 52 percent
What do you call 100,000 Frenchmen with their hands up
AMD Launches AMD Embedded R-Series APU Platform
Fed Should not Ignore Emerging Market Crisis
Fed casts shadow over India, emerging markets
Why are Chinese tourists so rude? A few insights

USD EUR - 1 year graph		BlogMeter 1.01