05-08-05

will hacking scripts come back with MSH

Microsoft in putting the longtime announced (http://weblogs.asp.net/jnadal/archive/2003/10/29/34413.aspx) new scripting unix like programming language MSH in the public beta forum (http://www.microsoft.com/downloads/details.aspx?FamilyID=... ) and their programmers are having their own blogs (http://blogs.msdn.com/arulk/) and wikis (http://channel9.msdn.com/wiki/default.aspx/Channel9.MSHWiki)
 
The viruscommunity has been alarmed because this new language is much more powerful than the old shell scripting as was announced in a paper of the virusbulletin http://www.virusbtn.com/conference/vb2004/abstracts/echie...
with an extensive description of this presentation here
http://www.networkworld.com/news/2004/1004futurwindo.html
And the viruswriters have been developing 5 scripts that do just that http://www.theregister.co.uk/2005/08/04/vista_virus/ as was mentioned by F-secure
http://www.f-secure.com/weblog/archives/archive-082005.ht...
 
The answer of the microsoft programmers is that the script is still 3 to 5 years away from being finalised and that scripts are the transport, not the reason while the new language should give some new security options that didn' exist before. http://www.leeholmes.com/blog/
 
And I hope they do - wait another 3 years - just as they did with windows 2003 which is a much more secure and powerful system and that they don't finalise it like .net that was hacked by an 18 year old belgian viruswriter (now awaiting trial for it) even if Bill said it couldn't be done. Hopefully he has now staff that should just do that, proof that it can be done.

 update 

note : seen some visits from microsoft after this post and I am very very very happy to announce that. I appreciate the clear and very fast communication. This is the only way to be faster than the FUD from the vulnerability and (some) security businesses (more acting as a mob).

http://blogs.technet.com/msrc/archive/2005/08/05/408720.a... http://blogs.technet.com/msrc/archive/2005/08/06/408741.a...

Microsoft is making it official. They are not including the code in the Vista release.

"Monad is only for the next three to five years and if you want to use Monad you can as an experiment, but never do it in a production environment. "

how to get it

. Go to http://beta.microsoft.com 

2. Sign in using your Passport account

3. Enter guest ID "mshPDC"

4. Click on "Microsoft Command Shell Preview" link

5. Follow directions


 

00:45 Gepost door technology changes fast not a lot | Permalink | Commentaren (0) |  Facebook |

De commentaren zijn gesloten.