Microsoft failed use its own patches :-P

[Dr Mordrid]

Somehow it just figures.....

http://www.detnews.com/2003/technology/0301/28/technology-70712.htm

Dr. Mordrid

[The PIT]

Don't you just love it very funny.

[cjolley]

Yuppers
The plumbers faucet always drips and the painters oun house is never painted.
It's a classic.
chuck

[Jon P. Inghram]

The disclosure comes less than a week after Microsoft Chairman Bill Gates marked progress on the company's "Trustworthy Computing" initiative. That effort, announced a year ago, made security a top priority at the Redmond, Wash.-based company. Microsoft put thousands of its developers through security training to emphasize writing secure code, and hired a chief security officer.

What do you think would happen if most doorknobs in the world were made by one company, and that all the knobs could be opened even when locked just by twisting the knob back and forth a few times? I wish I could walk up to someone who was driving a car I liked, and just say "What time is it? What time is it? What time is it? What time is it? What time is it? You want to give me your car." and have them hand the keys over without a second thought... Can't really single out Microsoft unfortuantly, it's so common people seem to think it's "normal."

[Kooldino]

Jon, is that what the security hole was? If you queried the DB for the time continuously or something?

[Jammrock]

Been fixing SQL SLammer all morning. IT's good to know the dolts at M$ haven't fixed themselves yet. I bet they wrote the virus to force people to upgrade to SQL SP3.

Jammrock

[Jon P. Inghram]

Nah, it's just the general idea behind buffer overflow exploits: Give more info than the software expects, and stick something nasty in the overflow. If the software is really poorly writen it can be tricked into running the code that overflowed.

Here's a link that describes the Slammer exploit.