Microsoft Corp may write flawed software, but it can take solace in the fact that the author of the "blaster" worm also makes mistakes.
And that error may be Microsoft's biggest weapon in fending off part two of the Internet attack that started Friday and is expected to continue into Saturday. The worm, which so far has infected more than 350,000 computers around the world, now aims to bring down Microsoft's Web site for software patches by flooding it with traffic.
The worm was already starting to have an effect in Asia and other parts of the world, said Gordon Johndroe, spokesman for the Department of Homeland Security. He urged home users and small and mid-sized businesses to download the patch.
The virus-like infection, also dubbed "LovSan" or "MSBlast," exploits a flaw in most current versions of Microsoft's Windows operating system for personal computers, laptops and server computers.
Although Microsoft posted a software patch to fix the flaw on July 16, many users failed to download the patch, leaving them vulnerable to the worm, which first started hitting computers around the world on Monday.
The worm caused computers to reboot frequently or disrupted users' browsing the Internet. But it also packed a second punch: starting at midnight local time on Aug. 16, infected computers that have not cleaned up the virus will in effect turn into a legion of zombies instructed to repeatedly call up a Microsoft Web site that houses the software patch. With so much traffic flooding the network, the site could be unreachable and computer users would be unable to access the patch.
Fatal flaw
But there's a flaw. The worm instructed computers to call up http://windowsupdate.com -- which is an incorrect address for reaching the actual Microsoft Web site that houses the software patch. Although Microsoft has long redirected those who visited that incorrect address to the real site -- http://windowsupdate.microsoft.com -- the company disabled the automatic redirection Thursday in preparation for the onslaught of infected computers.
Microsoft's real Web site should still be accessible to users, said Microsoft spokesman Sean Sundwall. However, those who don't know the correct address may be confused and believe that the so-called "denial of service" attack worked. The company is taking other measures to keep its site up and running, he said, although he declined to give specifics.
Microsoft's network and others around the country may still see a slowdown in Internet traffic simply from the volume of activity the worm is expected to generate from its legion of infected computers, said Vincent Weafer, senior director of security response for Symantec Corp, a security and antivirus company.
However, considering that Microsoft has disabled the automatic link from the incorrect Web site to the correct Web site, the worm's effects are "not going to be catastrophic," he said. "The Internet by itself is very resilient."
"It's a very simple and effective way of redirecting a denial of service attack into nowhere," he said.
A love note
The rate of new infections has slowed, he said. But computer users who still have not downloaded the patch need to do so, he said, adding that the company expects new infections to continue for as long as two years to come.
The worm left behind a love note on vulnerable computers: "I just want to say LOVE YOU SAN!"
It also carried a hidden message to taunt Microsoft's chairman: "Billy gates why do you make this possible? Stop making money and fix your software!"
Microsoft doesn't take the taunt personally, said Sundwall.
"Certainly we have had our naysayers in the past and I think those who have an ax to grind and happen to know how to write some code sometimes choose this mechanism to exhibit their frustration," he said.
Sundwall noted that Microsoft has been trying to make its software more secure, even before the "Trustworthy Computing" memo that Microsoft chairman Bill Gates sent last January, emphasizing the need for security and spawning months of training for developers on how to tighten up their code.
Despite that initiative, the flaw appeared in Windows Server 2003, the first new operating system to come out since the Trustworthy Computing campaign began.
Sundwall said there's more work to be done, and that Microsoft is looking for any ways to improve its security.
"Most people would agree while we have a long way to go ... we've come a long way," Sundwall said.
Stephen Garrett, a 27-year-old graduate student, always thought he would study in China, but first the country’s restrictive COVID-19 policies made it nearly impossible and now he has other concerns. The cost is one deterrent, but Garrett is more worried about restrictions on academic freedom and the personal risk of being stranded in China. He is not alone. Only about 700 American students are studying at Chinese universities, down from a peak of nearly 25,000 a decade ago, while there are nearly 300,000 Chinese students at US schools. Some young Americans are discouraged from investing their time in China by what they see
MAJOR DROP: CEO Tim Cook, who is visiting Hanoi, pledged the firm was committed to Vietnam after its smartphone shipments declined 9.6% annually in the first quarter Apple Inc yesterday said it would increase spending on suppliers in Vietnam, a key production hub, as CEO Tim Cook arrived in the country for a two-day visit. The iPhone maker announced the news in a statement on its Web site, but gave no details of how much it would spend or where the money would go. Cook is expected to meet programmers, content creators and students during his visit, online newspaper VnExpress reported. The visit comes as US President Joe Biden’s administration seeks to ramp up Vietnam’s role in the global tech supply chain to reduce the US’ dependence on China. Images on
New apartments in Taiwan’s major cities are getting smaller, while old apartments are increasingly occupied by older people, many of whom live alone, government data showed. The phenomenon has to do with sharpening unaffordable property prices and an aging population, property brokers said. Apartments with one bedroom that are two years old or older have gained a noticeable presence in the nation’s six special municipalities as well as Hsinchu county and city in the past five years, Evertrust Rehouse Co (永慶房產集團) found, citing data from the government’s real-price transaction platform. In Taipei, apartments with one bedroom accounted for 19 percent of deals last
US CONSCULTANT: The US Department of Commerce’s Ursula Burns is a rarely seen US government consultant to be put forward to sit on the board, nominated as an independent director Taiwan Semiconductor Manufacturing Co (TSMC, 台積電), the world’s largest contract chipmaker, yesterday nominated 10 candidates for its new board of directors, including Ursula Burns from the US Department of Commerce. It is rare that TSMC has nominated a US government consultant to sit on its board. Burns was nominated as one of seven independent directors. She is vice chair of the department’s Advisory Council on Supply Chain Competitiveness. Burns is to stand for election at TSMC’s annual shareholders’ meeting on June 4 along with the rest of the candidates. TSMC chairman Mark Liu (劉德音) was not on the list after in December last