And just to raise your blood pressure about Microsoft

**Kzin** · Jul 17th, 2001, 04:34 PM

This is from today's "Wired" about Windows XP.

Here's how it works:

After you buy your shrink-wrapped copy of Windows XP on a chilly October night at midnight and you go home to load it up, you'll still be asked to enter a multi-digit "product key" located on the back of your CD case.

But after a month, Windows will present you with a 50-digit "installation ID," with which you're to "activate" your system.

"What you have to do is phone the call center and tell them this code," Lopatic said. Once you do that, the nice people in Redmond, Washington, will allow your computer to go on.

**chrisjk** · Jul 17th, 2001, 04:38 PM

we already ranted about that

Damn those ******s. At least they are letting you uninstall IE though.

**HarryW** · Jul 17th, 2001, 04:47 PM

Microsoft are actually going to cause a big rise in DDoS attacks too, with the release of Windows XP, because it allows you to spoof your IP, something you can't do with other versions of Windows except 2k. The script kiddies are going to have a field day setting up their zombies and letting them attack virtually untracably.

Apparently the lack of ability to spoof IPs was a bug, and this is a bugfix. Fools.

**Kzin** · Jul 17th, 2001, 04:49 PM

Originally posted by chrisjk
we already ranted about that

Damn those ******s. At least they are letting you uninstall IE though.

I know we ranted - this was a new relase today in wired giving more details so I thought I'd rant more

**barrk** · Jul 17th, 2001, 04:50 PM

Rant away....if you think it will make you feel better...........if not.....have a drink and relax!

**Kzin** · Jul 17th, 2001, 04:56 PM

Originally posted by barrk
Rant away....if you think it will make you feel better...........if not.....have a drink and relax!

Actually I'm quite relaxed about this but you often get some good stuff thrown up here - like Harry's comments here - if you spread the news

Originally posted by barrk
. . . have a drink and relax!

You are offering a drink

you have a drink-over-ip patch on you computer

wow!

**barrk** · Jul 17th, 2001, 04:59 PM

denniswrenn · Jul 17th, 2001, 05:00 PM

Originally posted by HarryW
Microsoft are actually going to cause a big rise in DDoS attacks too, with the release of Windows XP, because it allows you to spoof your IP, something you can't do with other versions of Windows except 2k. The script kiddies are going to have a field day setting up their zombies and letting them attack virtually untracably.

Apparently the lack of ability to spoof IPs was a bug, and this is a bugfix. Fools.

I read about that on grc.com... But, how would you spoof an IP? I don't understand how you'd do it.

**HarryW** · Jul 17th, 2001, 05:05 PM

Every packet has a header containing the source IP and port number, and the destination IP and port number. The sender constructs this header, adds some data that it wants to send to the destination, and releases it into a sea of TCP/IP where it somehow washes up at the destination IP at the right port number.

However, if you don't care if you get a reply or not, you don't have to give the correct source IP or port number, and the recipient doesn't know where it came from.

**EternalKnight** · Jul 17th, 2001, 05:16 PM

In my honest and humble opinion, Microsoft has no obligation to not implement the full Unix socket. There are several reasons to implement it and quite honestly Steve Gibson is a fool if he isn't aware of the benifits.

The people who should be responsible are the ISP's. They have every ability to check outgoing traffic to make sure it's valid. Every IP packet that is sent out has to be checked for destination. It would be equally feasable to check the source IP. And, the source IP only has to be checked once.

This ability has been available, and has been used, and still IS used on many *nix machines.

**parksie** · Jul 17th, 2001, 06:43 PM

You're wrong, I'm afraid.

Raw socket support is, as Steve rightly points out, only required by the OS. What possible benefit can a legitimate program (other than for testing purposes) have for the ability to write a custom IP address onto the packet?

On Unix you can only use raw sockets when logged on as root - you cannot assign the privilege to any other user.

**chrisjk** · Jul 17th, 2001, 06:45 PM

hey hey, aurguments brewing!!

RIOT!!!!!!

**parksie** · Jul 17th, 2001, 06:50 PM

Bring it on...

**SteveCRM** · Jul 17th, 2001, 06:57 PM

did someone say....RIOT!!!!!!!!!!!!!!

I don't care what it's about, IM IN!!!!!!!! I got the bar (

) all ready! AARRGG!!!!!!!

**siyan** · Jul 17th, 2001, 09:01 PM

Kung Fu ready!

Music: "ohh oh oh hoooooo...."
"Everybody wants Kung Fu fighting..."

-C

**parksie** · Jul 17th, 2001, 09:07 PM

Everybody *was* Kung Fu Fighting

There were funky VB-men/from funky VB-World

**HarryW** · Jul 18th, 2001, 05:31 AM

EternalKnight, it is already possible on many other platforms, but what are 99% of the kind of people that would get infected with a DDoS Trojan going to be using at home, with no firewall and no clue that the little 'transmit' light shouldn't be on ALL the time? Whatever came with their computer, and you know as well as me that's going to be XP.

**Paul Warren** · Jul 18th, 2001, 07:15 AM

I agree with you Harry. We're all sat here developing VB apps on Windows platforms and WE can't think of a valid reason. Therefore the uses for it must be pretty damn minimal. It's not like it's going to give MS a bigger share of the market is it ?

*Steps into riot*

Ah, glasshoppers you have much to learn of the art of fighting. Prepare for a lesson ...

**smashtheqube** · Jul 18th, 2001, 07:55 AM

⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀

**CiberTHuG** · Jul 18th, 2001, 08:03 AM

Aslong as I can still pirate W2K for games, I'll be okay. Now, thanks to Loki, many games are moving to Linux.

**siyan** · Jul 18th, 2001, 08:06 AM

Originally posted by smashtheqube
http://www.cdfreaks.com/news2.php3?ID=1355

That shows you how to hack this stupid thing!

The trick works like a charm.

Even though its been around since before Whistler 2446...which is kinda old. You think MS would have changed something.

-C

Thread: And just to raise your blood pressure about Microsoft

Thread Tools

Display

And just to raise your blood pressure about Microsoft

Posting Permissions