Microsoft exec calls XP hack 'frightening'

[Tums]

Microsoft exec calls XP hack 'frightening'

http://www.news.com/Microsoft-exec-calls-XP-hack-frightening/2100-7349_3-6218238.html?tag=nefd.top

A Microsoft executive calls the ease with which two British e-crime specialists managed to hack into a Windows XP computer as both "enlightening and frightening."

 

[Ivanovich]

If you have an unsecured wireless connection at home, you deserve anything you get. Call it "e-Darwinism", if you like.

It's so easy to secure it.

 

[MGJ]

Hmmm, the Microsoft exec would (A) benefit, or (B) suffer, if people became "frightened" of Windows XP and moved to Vista instead?

Notice the article (and this thread) called it an XP hack and not an unsecured networking hack. Hmmm.

 

[blackjack007]

Quote from Ivanovich:

If you have an unsecured wireless connection at home, you deserve anything you get. Call it "e-Darwinism", if you like.

It's so easy to secure it.

what if you're in a public place like a hotel or airport? how are you gonna secure it?

 

[vikana]

they were running SP1, which has a number of security issues.

SP2 and zone alarm would be two good ways to lock things down tighter.

You should also disable your wifi unless you're using it. Most new laptops has a switch to do so on the front.

 

[kinar]

connected a machine running Windows XP with Service Pack 1 to an unsecured wireless network. The machine was running no antivirus, firewall, or anti-spyware software and contained a sample target file of passwords to be stolen.

XP (shipped oct 2001 so we are talking about an OS that is 6 years old)
SP1 (shipped sept 2002 so we are talking about a machine that hasn't been updated in 5 years)
unsecured wireless
no antivirus
no firewall
no anti-spy
passwords in text file

as an above poster aluded to, anyone running this setup simply deserves to get compromised for thier stupidity.

Nick McGrath, head of platform strategy for Microsoft U.K.,

platform strategy....sounds to me like a marketing position and not a technical one. doesn't surprise me that he wouldn't be educated about security issues.

Just because someone works for NASA doesn't mean they are an astronaut and likewise, just because someone works for Microsoft, doesn't mean they know anything about computers and of course, just because someone works for a news reporting agency doesn't mean that they have the knowledge to accurately report about an issue.