0
POPSWindows Vista Service Pack 1 RC Public Availability Program Installing SP1 RC1 now. You must run the script, then download the RC and the prereq's through Windows Update. Only install on non-critical machines. You will have to uninstall the RC before installing the final version. But hey, can installing the RC be any worse right now?
0
POPSMicrosoft Security Advisory (945713) Should not affect home users who are not part of a domain and also should not affect corps with a second-level domain (affects third-level or more). Proxy servers, WPAD servers, and those who disable the IE 'Automatically Detect Settings' mitigate this vulnerability. Most flavors of Windows/Vista affected when using MSIE (unclear whether or not other browsers have the same vulnerability, but I would assume they do if they depend on Windows/Vista to automatically detect settings).
0
POPSMore on the QuickTime RSTP vulnerability More on the RSTP vulnerability from Quicktime. Countermeasures include disabling Quicktime and iTunes until the problem is patched (likely v7.4), blocking RSTP at the gateway (TCP 554 and a range of UDP ports in 6000's), IDS detection of RSTP. Note- files are vulnerable too, so just blocking egress ports is probably not enough as any installed malware will probably use port 80 to egress. Best to disable the applications via the Registry (or uninstalling) until the patches are available as these exploits are almost certainly out there now.
1
POPSHackers will feed on Vista in 2008, says McAfee Next year is the test for Vista. If it does not follow past trends and is seen as a significant trend breaker, it may be viewed as having achieved its stated goal (security). That may finally be the tipping point for wider adoption. However, this is (and should be) a scary time for Microsoft. If Vista is not seen as successful by next year, there may be a wider trend of moving to alternative desktop OS's, such as Mac, especially as the hardware requirements to run Vista far exceed those of other OSs. This may be the start of MS losing some of the OS market share in late 2008.