Complaint Review: Alyon Technologies/eGroup - Secaucus New Jersey

FBI Says XP Fix Not Enough

Agency URGES additional step, but "Microsoft disputes" the need

Saturday, December 22, 2001 (When did Alyon start their CRIMINAL BUSINESS?)

By TED BRIDIS

THE ASSOCIATED PRESS

WASHINGTON -- The FBI's "top Cyber-Security Unit" warned "consumers and corporations" last night to take new steps beyond those recommended by "Microsoft" to protect against "(censored) who might try to attack major flaws discovered in the new version of Windows software."

The FBI's National Infrastructure Protection Center said that, in addition to installing a free software fix offered by Microsoft on the company's Web site, "consumers" and corporations using Windows XP should disable the product's "universal plug and play" features affected by the glitches. "Microsoft" considers disabling the "plug and play" features "unnecessary."

The company acknowledged this week that Windows XP suffers from "serious problems that could allow (censored) TO STEAL or destroy a victim's data files across the Internet OR IMPLANT ROGUE COMPUTER SOFTWARE. The glitches were unusually SERIOUS because THEY ALLOW (censored) TO SEIZE CONTROL OF ALL WINDOWS XP OPERATING SYSTEM SOFTWARE WITHOUT REQUIRING A COMPUTER USER TO DO ANYTHING OTHER THAN CONNECT TO THE INTERNET."

Outside experts cautioned that disabling the affected Windows XP features threatens to render unusable an entire category of high-tech devices about to go on the market, such as a new class of computer printers that are easier to set up. But they also acknowledged that disabling it could afford "some protection against any similar flaws discovered in the future."

The FBI also warned professional computer administrators to actively monitor for specific types of Internet traffic that might indicate an attack was under way.

A top Microsoft security official, Steve Lipner, sought to reassure consumers and companies that installing the free fix was the best course of action to protect their systems.

Last night's warning from the FBI's cyber-protection unit came after FBI and Defense Department officials and some top industry experts sought reassurance from Microsoft that the free software fix it offered effectively stops (censored)from attacking the Windows XP flaws.

The government's rare interest in the problems with Windows XP software, which is expected to be widely adopted by consumers, illustrates "U.S. concerns about risks to the Internet." The discussions came during a private conference call organized by the National Infrastructure Protection Center.

During the call, "Microsoft's experts acknowledged the threats posed by the Windows XP problems but assured federal officials and industry experts that its fix resolves the issues."

Microsoft declined to tell U.S. officials how many consumers downloaded and installed its fix during the first 24 hours it was available. Experts from Internet providers, including AT&T Corp., argued that the information was vital to determine the scope of the threat.

Microsoft also indicated it WOULD NOT send e-mail reminders to Windows XP customers to remind them of the IMPORTANCE of installing the patch.

Microsoft explained that a new feature of Windows XP can automatically download the free fix, which takes several minutes, and prompt consumers to install it.

Officials expressed fears to Microsoft about potential electronic attacks launched against Web sites and federal agencies during next week's Christmas holidays from computers running still-vulnerable versions of Windows, participants said.

Several experts said they had already managed to duplicate within their research labs so-called denial of service attacks made possible by the Windows XP flaws. Such attacks can overwhelm Web sites and prevent their use by legitimate visitors.

Another risk, that "(censored) can implant rogue software" was considered more remote because of the "technical sophistication needed." (SOPHISTICATED MODEM HI-JACKING-KRON TV San Francisco)

FIXING XP

Microsoft has offered a free fix for a flaw in its Windows XP operating system that "allows (censored)to connect to a victim's computer through the Internet." Click on UPnP Security Patch at www.microsoft.com/security

But the FBI said consumers should also disable the "Universal Plug and Play" feature by taking the following steps:

Open Control Panel and double-click the "Administrative Tools" icon.

Double-click the "Services" icon.

Scroll down the list until you can double-click the item for "SSDP Discovery Service." In the "Startup type" box, select "Disabled." Click OK.

Scroll down the list until you can double-click the item for "Universal Plug and Play Device Host." In the "Startup type" box, also select "Disabled." Click OK.

Restart the computer.

Any of this sound familiar to anyone?

Who did you say Alyon Technologies is "sleeping with"?

Hasn't "Microsoft" been mentioned?

Thanks Rip-Off Report

D

Longville, Louisiana
U.S.A.

Click here to read other Rip Off Reports on Alyon Technologies