[Enigmail] Malware redux

[John Clizbe]

Robert J. Hansen wrote:
> 
> "I am applying the digitally signed updates which I have downloaded from
> another PC and burned to a CD.  The signatures verify.  I am confident
> these updates are authentic."  Again, good -- no uncertainty.

Since much of this applies to, and many of the folk here are running, Windows,
here's a useful tool.

See http://www.heise.de/ct/projekte/offlineupdate/ (It's in German)

Older English story:
http://www.heise-online.co.uk/security/Do-it-yourself-Service-Pack--/features/80682)
Story refers to version 3.0 of the tool. Current release is 4.8.

The English version of the download area is here:
http://www.heise.de/ct/projekte/offlineupdate/download_uk.shtml

The tool is a script that will download for each OS version (2000, XP, 2003,
Vista/2008) and/or Office (2000, XP, 2003, 2007) release/language combination
ALL applicable updates from Microsoft and burn those updates to an ISO image
which may be transferred to a CD or DVD.  This disc may then be used to update a
fresh Windows install without having to connect to the 'Net. The finished update
packet can also be copied onto a USB stick, for example, or prepared for sharing
over a local network. (~700MB for XP)

Installation involves inserting/mounting the image and a double-click on
UpdateStarterGUI.exe to launch the installation of the updates on the target PC,
or simply insert a CD or DVD with one of the ISO images recorded on it (it will
start from the autoplay function). The installation of the missing components
and updates may require several reboots. The "Automatic reboot and recall"
option allows the script to shut down the PC on its own where necessary and then
resume work following the reboot - this is as easy as it gets.


-- 
John P. Clizbe                      Inet:John (a) Mozilla-Enigmail.org
You can't spell fiasco without SCO. hkp://keyserver.gingerbear.net  or
     mailto:pgp-public-keys at gingerbear.net?subject=HELP

Q:"Just how do the residents of Haiku, Hawai'i hold conversations?"
A:"An odd melody / island voices on the winds / surplus of vowels"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 677 bytes
Desc: OpenPGP digital signature
URL: <http://www.mozdev.org/pipermail/enigmail/attachments/20080828/57f4cfec/attachment-0001.bin>