from the no-time-like-the-present dept.
Julie188 writes "Mystery solved! Microsoft's latest emergency out-of-band patch was weird beyond belief. A notice was sent to journalists and researchers late Friday evening that the patch was coming Tuesday, but Microsoft refused to explain the flaw and even put a cone of silence around researchers who would have otherwise talked about it. But finally, one researcher broke ranks and explained that the patch was caused by a flaw introduced in Microsoft's own development tools. This flaw was also the source of the emergency ActiveX patch, which took about 18 months to complete and which supposedly fixed the problem by turning off ActiveX (setting a 'killbit' on the control). Researchers at Black Hat on Wednesday will be demonstrating how to override the killbit controls and get access to vulnerabilities supposedly stopped with a killbit. What's really scary is that Microsoft has issued 175 killbits fixes so far."
Detective writes: This is an unknown KB-929547 Hotfix for Vista, I started seeing posts about this on Zone Alarm forums, I searched Google, not much turned up, so I searched Microsoft, nothing at all on this KB. Here is what I have learned, this KB appears to be included in the Zone Alarm Installer for Vista, not sure what version 7.xxx, It appears to install at the same time ZA does, it appears to be a counter measure for cracked versions of Vista, renders the activation crack used by pirates inoperative. So is this true?, and is Microsoft using covert tactics to thwart piracy? I will let Slashdotter's get to the bottom of this story.
My homework so far.