XP Service pack 1 alternative??????

What Tha *%@#

unread,

Sep 22, 2002, 5:16:29 AM9/22/02

to

Hi all
I read this somewhere in this NG. Does anyone know where i can find
it????Please.

Rols...
---snip---
And users shunning SP1 are vulnerable to the major flaw that Microsoft
addresses in the service pack. A recently discovered glitch in Windows XP's
Help and Support Center functions could enable a malicious cracker to delete
files off a user's hard disk remotely.

But even the update holdouts have an alternative, although it's not
sanctioned by Microsoft. Last week, security expert and software developer
Steve Gibson released a freeware program to patch that specific bug for
users who either cannot or do not want to install SP1.
---snip---

Richie

unread,

Sep 22, 2002, 7:21:01 AM9/22/02

to

http://www.grc.com

SQR

unread,

Sep 22, 2002, 11:57:50 AM9/22/02

to

You must download SP1 to get the full benefit from all the fixes. The one
serious glitch which you are talking about is the file call
"uplddrvinfo.htm" which must be removed. Microsoft new about this for a long
time and it was brought to there attention by Steve but they basically told
him to keep quiet. His freeware patch removes this file and then test the
system. SP1 also repairs this problem. If anybody wants to learn about
security problem go to Steves site it is excellent.

"What Tha *%@#" <roliv...@bigpondCrap.com> wrote in message
news:aMfj9.37754$g9.1...@newsfeeds.bigpond.com...

larry samuels

unread,

Sep 22, 2002, 12:45:14 PM9/22/02

to

Steve had nothing to do with bringing it to their attention

--
Larry Samuels MS-MVP (XP)
Associate Expert
Unofficial FAQ for Windows.NET Server 2003 at
http://home.triad.rr.com/faq/WNS2003%20FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone
_____________________________________________
"SQR" <s...@quickclic.net> wrote in message
news:amkpa4$hbu$1...@news1.mountaincable.net...

SQR

unread,

Sep 22, 2002, 12:47:15 PM9/22/02

to

Oh Yes He Did.
"larry samuels" <la...@mvps.org> wrote in message
news:usmj9.37494$jF4.2...@twister.southeast.rr.com...

Mr. Wilson

unread,

Sep 22, 2002, 1:05:24 PM9/22/02

to

just go to www.grc.com and download his 30kb XPdite.exe and stop farting
around with monopolysoft. XPdite fixes bill's goof.

--mw

"SQR" <s...@quickclic.net> wrote in message

news:amks6o$jfv$1...@news1.mountaincable.net...

larry samuels

unread,

Sep 22, 2002, 1:12:13 PM9/22/02

to

http://online.securityfocus.com/archive/1/287482/2002-08-10/2002-08-16/0

--
Larry Samuels MS-MVP (XP)
Associate Expert
Unofficial FAQ for Windows.NET Server 2003 at
http://home.triad.rr.com/faq/WNS2003%20FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone
_____________________________________________
"SQR" <s...@quickclic.net> wrote in message

news:amks6o$jfv$1...@news1.mountaincable.net...

Joan Hansen

unread,

Sep 22, 2002, 5:54:59 PM9/22/02

to

I believe that the Register brought it to the attention of the public
and everyone else last June 2002. Steve made the fix.

Joan

SQR

unread,

Sep 22, 2002, 5:58:28 PM9/22/02

to

XP Pro Corp has been out since before last October 2001, a little time later
MS was told.

"Joan Hansen" <jaha...@cox.net> wrote in message
news:3D8E4B9E...@cox.net...

larry samuels

unread,

Sep 22, 2002, 8:26:22 PM9/22/02

to

Follow the link I gave you and you will see who reported it and when.

Steve not only did not find it,he gives no credit to Shane Hird--the man
that DID find it.

You do have to give Steve credit though--he is a legend in his own mind AND
an expert at self-promotion

BTW--it was first reported June 25,2002
Last October,Steve was too busy ranting on UPnP to see anything else..

Also--Steve was on the XP beta--wonder why he didn't see it then?? LOL

--
Larry Samuels MS-MVP (XP)
Associate Expert
Unofficial FAQ for Windows.NET Server 2003 at
http://home.triad.rr.com/faq/WNS2003%20FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone
_____________________________________________
"SQR" <s...@quickclic.net> wrote in message

news:amleea$2in$1...@news1.mountaincable.net...

SQR

unread,

Sep 22, 2002, 8:46:08 PM9/22/02

to

Were you on the Beta then because I wasn't and I am sure Steve wasn't just
the general public was.

"larry samuels" <la...@mvps.org> wrote in message

news:Octj9.38811$Wa.20...@twister.southeast.rr.com...

larry samuels

unread,

Sep 22, 2002, 10:12:33 PM9/22/02

to

Hi SQR,

I was----and Steve was.
He has had access to XP since Windows Millennium went final and the XP beta
started in 2000(as have I)

Don't get me wrong.
I respect Steve for what he is--an excellent programmer.He wrote the best
hard drive utility available--Spinrite.
I wish I had one tenth of his ability writing Assembly.

I do not fault him for not finding the exploit--I fault him for leading
everyone into thinking he found it and giving no credit to the man that did
the work.

I fault him for leading loyal followers into believing he is something that
he is not--a security expert.
Neither am I.but I can see dozens of easy entry points into systems that
Shields Up reports as secure.

XPdite does nothing more than replace the offending file with the version
from SP1--it does not patch the rest of the hole.

Regardless of that fact or of my personal opinion of Steve,
I thank him for making this utility available to the public.I recommend that
anyone that has not installed SP1 run XPdite immediately.

I respect Steve--I just don't buy into his hype.

--
Larry Samuels MS-MVP (XP)
Associate Expert
Unofficial FAQ for Windows.NET Server 2003 at
http://home.triad.rr.com/faq/WNS2003%20FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone
_____________________________________________
"SQR" <s...@quickclic.net> wrote in message

news:amlo8n$ajd$1...@news1.mountaincable.net...