Ouch! Microsoft spanked on security assessment
That's no problem for Tom Liston of Intelguardians Network Intelligence LLC, a handler on the Interest Storm Center. In a lively posting on the Internet Storm Center, Liston takes Microsoft to task for its assessment of the security threat of the recently discovered Windows Meta file flaw.
In a posting titled "Oxy-morons," Liston compares Microsoft's security team to Oompa Loompas in the movie Willie Wonka and the Chocolate Factory, err, make that Billy Wonka.
Liston characterizes Microsoft's updated security advisory on the WMF flaw as overly optimistic, compared to the threat that exists.
The advisory notes that although serious and malicious attacks are currently being attempted to exploit the vulnerability, the software giant's "intelligence sources indicate that the scope of attacks are not widespread." Microsoft, as a result, hopes to release a fix when its next monthly patch cycle rolls around on Jan. 10.
"While all of the rest of us were sleeping, it appears that the propeller-heads working on Billy Wonka's Official Microsoft Research and Development Team have been hard at work creating a crystal ball capable of foretelling the future. The only problem: it appears that they made it from rose-colored crystal," Liston notes.
"The merry, lil' Redmond Oompa Loompas are chanting, "our patch isn't ready/ you have to wait/ so keep antivirus/ up-to-date," states Liston's lyrical jingle. "And remember, if something bad does happen to you during the next seven days, Billy Wonka and his Magic Metafiles aren't to blame. You are."
Not a shy guy, that Liston...
