Just saw this @ Xp-erience.org

This free online utitilty lets you check Internet Explorer for security holes and certain 'hacks'. If it does indeed find anything wrong, it will then tell you what you need to do to fix the problems.

Internet Explorer Security Check

The PC manufacturers and integrators make pressure. Errors like the registry bluescreen or the false alarm of the registration function after changing memory modules force the PC manufacturers to high expenditures for support. Therefore these are dependent on Microrofts fast reactions. Now Microsoft prepares distribution of the service pack on CD to its OEMs. A download version will be available some days later. Insiders maintain that the download version will not repair all errors, because Microsoft would hardly offer large files on its web server up to 120 MByte. Microsoft is expected to release updates in question via Windows Update in small portions. Source: VNunet.de

Recently Microsoft & Hotmail have added 3 new user info sharing options under hotmail accounts. These checkboxes are checked by default without the user permission, so "by default" you are letting Microsoft use your private info for offering it to companies.

Too disable it, go under Options/Personal into hotmail account preferences.

Sorry for my poor english. Bye!

Proxy Server 2.0 Security Patch for Unchecked Buffer in Gopher Protocol Handler: A problem could occur on a Proxy Server 2.0 computer while processing Internet Gopher protocol requests. When a malicious Gopher request is received, the Proxy Server 2.0 Web Proxy may send back an invalid response, generate an access violation error message, and stop providing services.

ISA Server 2000 Security Patch for Unchecked Buffer in Gopher Protocol Handler: A problem could occur on an Internet Security and Acceleration (ISA) Server computer while processing Internet Gopher protocol requests. When a malicious Gopher request is received, the ISA Server Web Proxy service may send back an invalid response, generate an access violation error message, and stop providing services.

REDMOND, Wash. -- June 17, 2002 -- Microsoft Corp. today announced the availability of Microsoft Internet Explorer 5.2 for Mac OS X, the latest update to the most popular browser available for the Macintosh operating system. The update includes a number of enhancements that make the browsing experience better for customers using Mac OS X. For example, using Quartz text smoothing, Internet Explorer 5.2 now provides smooth display of text, making Web sites easier to read. The free* download is available @ http://www.microsodt.com/mac/.

Just saw this @Theinquirer.net

INDUSTRY SOURCES close to Microsoft's plans say that certain OEMs will be proved with service pack one as early as the end of this month. System integrators have wanted Microsoft to introduce the service pack for some time. At a system builder conference in Monaco earlier this year, Microsoft was suggesting that it could arrive in September.

But, we are told, Microsoft is being forced to ship the product earlier than it wished to because of problems OEMs and integrators have encountered.

Those include factors such as the re-activation nightmare that our own Asian editor experienced when substituting 1066RDRAM for 800MHz RDRAM in Intel own motherboards.

Neowin.net the Command Prompt Explorer Bar is a small tool that extends Windows Explorer.

Ever tried to run one of those console programs ("Hello World!" to name a few), .BAT, .VBS or .JS scripts just to see black window popping up and disappearing? I did. Especially after I started using .Net framework I find myself doing this more often. No wonder - with all this ALs , NGENs and TLBIMPs. So if you are like me then this tool is right for you.

Next time you need to run a program without GUI, just press the 'Ctrl+M' key combination in your explorer. A command prompt will start and appear automatically. Its current directory will be exactly the same as the current path you are browsing. And better yet the console will appear inside your explorer window - like any other explorer bar does - 'History', 'Favorites', 'Folders' etc.

Registry damage often occurs when programs with access to the registry do not cleanly remove temporary items that they store in the registry. This problem may also be caused if a program is terminated or experiences a user-mode fault.

Building on the industry-leading Windows Media Audio and Video codecs, "Corona" introduces two new professional-level audio and video codecs. The new WMA Professional codec is the first codec to enable Web-based delivery of 6 channel surround sound with full-spectrum, full resolution audio (24 bit / 96 kHz sampling). A new version of the Windows Media Video (WMV) codec provides a 20% efficiency boost compared with the previous version and now introduces the ability to provide HDTV-like video quality at file sizes half that of today?s DVDs, for local playback on the PC.

Fast Streaming delivers an "instant-on, always-on" streaming experience for broadband users, effectively eliminating the ever-present buffering delays. Fast Streaming also automatically optimizes the delivery of streaming audio and video to take advantage of the full bandwidth available to the user, which vastly reduces or eliminates the impact of congestion on the Web for broadband users.

Just got word from our good friends @ Neowin.net that there's 2 new updates on the Windows Update site:

Q321599: Security Update: for W2K This update resolves the "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise" security vulnerability in Internet Information Services (IIS) 5.0. Download now to prevent a malicious user from running code of his or her choice on your computer.

Q318138: Security Update: for W2K / XP This update resolves the "Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution" security vulnerability in Windows 2000/XP. This vulnerability is the result of an unchecked buffer in the Remote Access Service (RAS) Phonebook. Download now to eliminate this vulnerability by instituting proper input checking on the RAS phonebook entries.

PivX Solutions provides a free fix for the MSIE Gopher Root[1] Vulnerability. Recently, this hole in Microsoft's Internet Explorer (all versions) leaves most windows computes wide open.

If you leave this vulnerability unpatched any hacker or cracker can gain root access control over your system. Once root is achieved, the attacker can steal anything they want from you including your personal databases, contacts, records, documents and more... PivX cleans up someone else's mess with another small, free, streamlined security tool to make your computer safe once again.

Just as predicted, news media this week seems to be covering the MSIE gopher root exploit with a new focus on Microsoft and their real problems with security, not just the latest hole. One company even goes as far to say that they 'cleaned up Microsoft's mess, once again'. With 18+ un-patched vulnerabilities in line for a fresh MS-fix, this may be the straw that breaks the camel?s back.

Microsoft has once again updated its popular IM program MSN Messenger. As usual its hard to determine what's new in this one, but I assume that the latest security fixes have been applied to it. Download from the links below:

MSN Messenger for Windows XP

MSN Messenger for Windows 9x/Me/2K/NT

This patch addresses the vulnerability discussed in Microsoft Security Bulletin MS02-022
Version - 4.2
Release Date - 11 June 2002
Operating System - Windows 95 & 98, NT 4.0 & 2000, Windows Me, Win XP

Just saw this report @ Theregister.co.uk!

Here we go again? Shortly after the beta of WinXP Service Pack 1 was released, locking out installations using leaked activation keys, a workaround with what appears to be a replacement key began circulating on IRC. We can therefore look forward to a repeat of the Windows Product Activation wars that were waged during the original XP beta, as crack and block alternate until the product actually ships.

At which point, barring the invention of an entirely new and uncrackable system, the final crack will be unveiled. At the moment, the SP1 beta won't install on systems using at least one widely-leaked activation key. The workaround circulating appears to include a replacement key, but given that this could be easily blocked by Microsoft in future builds, its main importance is that it explains a procedure for deactivating the system and entering a new corporate key.

.NET Framework ASP.NET Session State Security Hotfix: When working with Microsoft ASP.NET, a component of the Microsoft .NET Framework provides for session state management through a variety of modes. One such mode, called StateServer, stores session state information in a separate running process that can run on either the same machine as the ASP.NET-based application or on a different machine. An unchecked buffer in one of the routines handles the processing of cookies in StateServer mode, resulting in a security vulnerability.

Windows XP Patch: Windows Management Instrumentation Cannot Register Permanent Event Consumer with Dynamic Classes: This update addresses the "Windows Management Instrumentation Cannot Register Permanent Event Consumer with Dynamic Class" issue in Windows XP, and is discussed in Microsoft Knowledge Base (KB) Article Q319322. Download now to allow registration of permanent consumers

Windows XP Patch: WMI AccessCheck Receives Local Administrator's SID: This update addresses the "WMI AccessCheck Receives Local Administrator's SID" issue in Windows XP, and is discussed in Microsoft Knowledge Base (KB) Article Q320678. Download now to avoid using the Administrator SID with WMI AccessCheck Method.

Platform SDK Redistributable: COM+ Java Runtime Support: This download contains the redistributable files for the COM+ Java Runtime support.

Extensiontech.net have snagged 12 screenshots of Windows 2000 Service Pack 3!



I did a fresh install of Windows 2000, and just did the service pack after that. I was relieved not to have 40 updates needed at the Windows Update Site. IE Updates, DirectX 8.1 and Media Player 7 showed as still available for download, and they all downloaded and installed without a hitch. As far as I know, this Service Pack doesn't expire. It also is about 123 megs. I'm sure this is, or will be floating around the net shortly...

The great folks over at irc.BetasOnline.com - #BETAS have created a fully-functioning DirectX9 Beta1 Setup with NO timebomb... vorte[x] from #Betas writes, "Ok after being sick and having GxV shoot over updates to the installers like 3892839238 times, we are happy to release the DirectX 9.0 Beta 1 Prepatched packages for Windows 9x/Me and Windows XP. You can find these files to download on #betas @ irc.betasonline.com. Don't worry the Windows 2000 / .Net packages will be released shortly. We're just touching up some things. Final screenshots and Download Hit Read More:"

Just saw this @ Xp-erience.org:

Yes you heard right. DIVX players were known to be in the works when suddenly an early version appeared, written by d7o3g4q from the Xboxhacker.net BBS. The first version was not bootable on our Xbox but we got an updated version this morning and this one boots fine on our Xtender chipped Xbox. The player is not yet finished, but it shows that the Xbox is perfectly capable of playing back DIVX movies...

Heavy_K's Polygamy Patch will change your Messenger to allow you to use multiple instances. That means that you can log in with 2 different accounts at the same time.

Version 4.7.0031 of MSN Messenger is required. that the latest MSN Messenger Ripped and Leaked from the XP SP1 Beta 1050!