Why Hasn’t Microsoft Fixed This 20 Year-Old Vulnerability? - Comments Page 1

Category: Security , Windows



All Comments on: "Why Hasn’t Microsoft Fixed This 20 Year-Old Vulnerability?"

Comment Page: 1 |  2 

Posted by:

Mike Davies
18 Aug 2016

Bob, you say Microsoft Outlook email, does that mean Windows Live Mail too?
Your advice is, as ever, timely and essential reading.

Posted by:

David
18 Aug 2016

Bob - thank you for this very informative article, it really reinforces my decision to use Firefox, and Chrome as a backup.

You said that the Outlook program is also subject to this vulnerability. Does that mean that Outlook.com, accessed through Firefox or Chrome, is not?

thank you again.

Posted by:

tom-tom
18 Aug 2016

I read the notice myself. It specifically stated the LEFT side of the brake pedal. However, you got it correct by writing "the big toe".

Posted by:

Jim R
18 Aug 2016

Every time I read something like this, I am happier that, several months ago, I switched to Linux Mint. It was easy to do and I can use Firefox, Chrome and Chromium. The Windows-only program I use can be run within Linux in a virtual Window. The only malware reported was when a systems manager, knowing he was about to be fired, left a parting gift.

Posted by:

JGS
18 Aug 2016

Once you go Mac, you won't go back!

Posted by:

Danny
18 Aug 2016

Big business fails again. This is normal for Microsoft.

Posted by:

Fernando
18 Aug 2016

Thanks Bob for your always on time information, even for an old bug like this.

This is the main reason I have walked away from Microsoft the most I can... and keep going further on each available opportunity. I don´t like their software attitude towards keeping bugs for selling new OS and keep old bugs alive.

I use Google Chrome and Mozilla Thunderbird for mail maanger, walked long time ago on Gmail and use Open Office for all spreadsheets, documents and presentations. All available for free and don´t chage menus on every update (no new learning curve for each update).

Still have to keep Microsoft OS, just because I have not made me the time for the learning curve for Linux. I hope will do in the future.

Thanks again for all your always useful information and tips, keep up your great work !

Posted by:

RichF
18 Aug 2016

Almost unbelievable considering all the security patches they are constantly sending out. Would be interesting to find out why they don't close that hole.

Posted by:

Therrito
18 Aug 2016

Failing to patch a 20 year old vulnerability is simply unacceptable. Microsoft is dragging their name deeper into the mud.

Thank you, Bob, for another great article.

Posted by:

Paul Morris
18 Aug 2016

what I do NOT Understand, is that Microsoft Knows about this Problem and according to the article, has done NOTHING ABOUT IT! I Play World of Tanks almost Daily, and when a Player has a Problem in Playing the Game, he can E-Mail World of Tanks aka Wargaming and they WILL Provide the Player with a Solution within TWO DAYS at the most or Provide the Player with a List of Possible Solutions that very Day! And they have a Membership of 6,000,000 and Still Growing. So, I do not understand WHY Microsoft Has Not or Refuses to Correct the Problem. Thank God I have ''Mozilla''.PS; I have LibreOffice.

Posted by:

JOhn
18 Aug 2016

Paul, You fail to realize that correcting the bug requires man power and time. Yes it should have been corrected sooner but all the same, You have no idea how much time and effort it would take. Perhaps you should look at the code and see if you could fix it yourself before bashing developers?

Posted by:

James38
18 Aug 2016

Great article. I especially liked, "“We’re aware of this tendency of our brakes to fail, but if you press only the right-hand side of the brake pedal with only your big toe, you’ll be fine.”
I think it’s more likely the public would ensure its safety by buying someone else’s car."

I have always avoided Outlook, and am staying with 7 until it is impractical, at which point I will switch to Linux - so I am on my way to "buying someone else's car."

What finally did it for me was the unconscionable pressure and scams to force "upgrade" to 10. I have always waited a year or more to change to a new MSOS to avoid the rush of bugs...and I skipped from XP to 7 and stayed there. (I was just as happy with XP. That was a great OS, should have just been improved. No need for "new" ones that are not really new anyway. Just further additions to the basic byzantine architecture of the Microblather OS's.

Thanks for the information about the unresolved security problems. Microsoft is a weird bunch, and they finally have totally insulted my intelligence. No more microjunk for me.

Posted by:

James38
18 Aug 2016

JOhn (post just above mine): Why are you trying to offer a sugar coated excuse to MS for their inaction?

"You have no idea how much time and effort it would take. Perhaps you should look at the code and see if you could fix it yourself before bashing developers?"

That is nonsense. Microsoft is IN THE BUSINESS of creating and selling Operating Systems. They have NO excuse for not fixing the product they wrote from scratch in the first place.

Fixing a problem like this is BASIC to their business integrity and purpose, not some little thing that is just too hard to do.

This attitude, plus their scamming and dictatorial approach to clients is why I am dumping Microjunk and migrating to Linux.

Posted by:

JP
18 Aug 2016

As a former employee of Microsoft Tech support, I can explain this the way it would've been laughingly explained to me... "It's a feature, not a bug!" and, "Why fix it if there's a workaround?"

Posted by:

noseitall
18 Aug 2016

I never did trust logging in to a Microsoft account to access my own computer, therefore I've always used a local account.
And isn't it strange that Microsoft developed their highly-touted Edge browser to replace the (presumably) more insecure Internet Explorer, without fixing this known vulnerability?
So think twice before storing anything valuable on Microsoft OneDrive. Without a firm commitment to security, all of Microsoft's offerings are risky.

Posted by:

Daniel
18 Aug 2016

Whoa now, hold on buddy. Are you trying to tell me that people still use IE? Just kidding. I still have a couple of specific web sites that only work with IE. Somehow, even chrome's IE emulator won't work. That's the only time it is ever opened.

Posted by:

Leah
18 Aug 2016

Maybe it's not fixed to make it snap-easy for microsoft to peruse a system at will? Backdoors come in all sizes and shapes.

Posted by:

Tom McElvy
18 Aug 2016

The fix is simple - get a Mac!

Posted by:

Elizabeth Perilloux
18 Aug 2016

Is browser Bing vulnerable to this XXE?

EDITOR'S NOTE: Bing is a web site, not a browser. So, no.

Posted by:

David Hickman
18 Aug 2016

Apart from Windows 10 I am a Microsoft free zone. I use Chrome, EM Client have a gmail address and use Office Libre. The only reason I stick with Windows is that I'm too old or too lazy to change.

Comment Page: 1 |  2 

Read the article that everyone's commenting on.

To post a comment on "Why Hasn’t Microsoft Fixed This 20 Year-Old Vulnerability?"
please return to that article.

Send this article to a friend. Jump to the Comments section. Buy Bob a Snickers. Or check out other articles in this category:





Need More Help? Try the AskBobRankin Updates Newsletter. It's Free!

Prev Article:
Geekly Update - 17 August 2016
Send this article to a friend
The Top Twenty
Next Article:
Postpone The Windows 10 Anniversary Update

Link to this article from your site or blog. Just copy and paste from this box:



Free Tech Support -- Ask Bob Rankin
Subscribe to AskBobRankin Updates: Free Newsletter


Privacy Policy     RSS/XML