[LonFarGon]

@ Tommyp

fyi..>
Published: June 09, 2009 - Updated: June 17, 2009 - Version: 1.1
http://www.microsoft.com/technet/security/...ory/969898.mspx


In the (969898, v1.1) FAQ..>
Does this update replace the Cumulative Security Update of ActiveX Kill Bits (950760)?

No, for the purpose of automatic updating, this update does not replace the Cumulative Security Update
of ActiveX Kill Bits (950760) that is described in Microsoft Security Bulletin MS08-032.

Automatic updating will still offer the MS08-032 update to customers regardless of whether or not they
installed this update (969898).

However, customers who install this update (969898) do not need to install the MS08-032 update to be
protected with all the kill bits set in MS08-032.



.

[tommyp]

Thanks LonFarGon and welcome to the board.

So, does this mean that the update supercedes something else? Or is it supposed to be used in tandem with MS08-032? One sentence says that it doesn't supercede the cumulative activex rollup, and another sentense says if you install the 969898 update then you don't need MS08-032. My vote is that the new one replaces the old. Now I know why they are dropping support for 2000 soon, they can't even get a lousy KB article clear.

[Martin H]

The article states that KB969898 replaces KB950760, but just not for automatic-updating, which then must mean that there's a bug in the automatic update engine, since the article states that you don't need KB950760 if you have allready installed KB969898...

[LonFarGon]

Hi

@ Tommyp
Peeps that are using windows update should install both. First KB950760, then KB969898.
That way there is no nagging from Microsoft Update, or a 3rd party app like Belarc Advisor.
Works for me in 2K.

@ Martin H
Bug.. Yes, more then one- no doubt! heh..
For sure it will not be fixed anytime soon.

cya

[jsyzc]

appreciate the updates gentlemen!

[Trolleri]

Does HFSLIP v1.7.8 still work with the newest updates listet on the list, i.e. IE8, or should I use the beta-version?

To improve the GUI-experience, the following feature could be added, to avoid questions as the one I just gave you:

Get HFSLIP to check two online RSS-files - one file with the current hotfix list, and one with the deprecated hotfixes. Then HFSLIP automatically check the subdirectories for hotfixes that the user intends to slipstream, and report if any updates are not included, and also report if deprecated ones are present. Just remember to include an option to skip the proces, if you want a specialized version to slipstream, and everybody will be happy

[Martin H]

You should use the latest beta, as IE8 slipstreaming was one of the things added in the betas...

[Crash&Burn]

Martin H, on Jul 15 2009, 05:54 AM, said:

You should use the latest beta, as IE8 slipstreaming was one of the things added in the betas...

The board is pretty confusing Martin, look at it
---> Latest stable release - HFSLIP 1.7.8 - June 14

And then look at that thread, glance a bit at what the first post says.
Then go look at the Test Release thread, and this is still at the very top of it, before TommyP edits in:

Quote

These versions are test builds. Use them at your own risk.

A new final was released on June 14 2008. If you were referred to this thread prior to June 14, please get the final from the main thread.

The "Sticky: HFSLIP, The 2K/XP/2K3 slipstreamer" thread should be locked/renamed or something, and the first post updated, as well that bit I quoted needs to be removed from the current "HFSLIP - Test releases" thread.

[Martin H]

@TommyP

You most probably allready knows this, but just in case you didn't, then there's an out-of-band critical IE update comming out tomorow(28'th juli) for Win2k, WinXP and Win2k3(moderate for that OS)...

Sorry again if you allready know it...

Out-of-band Advance Notification: http://www.microsoft.com/technet/security/...09-jul-ans.mspx

[Brimborium]

For some reason, Google's SafeBrowsing service mistakes vorck.com and the update lists as "suspicious" - http://safebrowsing.clients.google.com/saf...fixes_2000.html

They suggest this action: http://www.stopbadware.org/home/reviewinfo...fixes_2000.html

[gUiTaR_mIkE]

When I click all 3 links directly from page 1 (not through a google search) I get the following message...

[fdv]

Thanks for the alerts, guys.
I went into the site and removed a bunch of IFrame triggers.
I must have had a Trojan that sent my FTP credentials to someone who had some fun at my expense.

Oddly, this has only happened to me at IX Web. Honestly I am not sure if THEY get hacked and then I visit and get a Trojan, or if I get the Trojan first. I'm sure it's me. Hard to tell after it's happened a few times and I seemed to have a clean system.

Anyway, I have requested a site review from Google and we'll go from there.

Thanks again for this alert, guys.

[-X-]

It might not be you. These things are setup so that websites infect each other.

[Martin H]

@TommyP:

A very small nitpick to when you are anyway going to update your update-lists, is that the removal-date isn't right on the Win2k list...

(And my previous remark about an IE out-of-band update, is MS09-034, where KB972260 replaces KB969897...)

CU, Martin

This post has been edited by Martin H: 30 July 2009 - 02:45 AM

[gUiTaR_mIkE]

In hopes that it will help a bit to determine what Google is up to I clicked the tab Why was this site blocked?

...If interested in the message Here It Is!

[tommyp]

@Martin - The header name of the column was deleted on purpose. It's easier for me to maintain lists this way. To make life easier, the files at the bottom are the most recently deleted. Actually I do not want to maintain lists anymore... so things may not be pretty anymore.

[Martin H]

@TommyP:

Thanks for your reply, mate!

Btw, the dx7 update on the Win2k list(KB961698) has on patch-tuesday been replaced by: MS09-028 - KB971633

How about you yourself just start maintaining an update-list of what you yourself uses(so you don't have to run VMs and use time on stuff you don't use). I mean an update-list of only Win2k-SP4 with DX9, IE6 and wmp6(and just have it as a thread here on the forum)...

Then the XP and 2k3 users could themselves make their own lists...

Also, if i where you, then i would only maintain the Win2k part of HFSLIP(as thats's what you yourself uses), and then let the other OS users make their own changes, but that's just me

Anyway, if you can handle to support all three OS's with HFSLIP and update-lists, then more power to you, but i just think that it sounds all to much to handle personally...

CU, Martin

[tommyp]

Martin - Thanks for pointing out the dx7 error. The page was just sent to FDV a few moments ago.

I do not run the updates with virtual machines, I just update the lists and wait for complaints. If complaints roll in, then a script update has to be implemented (i.e. a new beta). Maintaining the lists is key because it shows the basic file/folder structure for hfslip to work right. Most noobs can't seem to get that. For now, maintaining hfslip and lists takes a few irreplaceable hours of my life each month to do a thankless and non-paying job. One thing particularly aggrivating is when I see the occasional posts by people who continually click refresh on their browswer on patch tuesdays. Once they see that the msft website lists updates, they put the hotfix hyperlinks on this thread. Maybe they are trying to be a hero or something. Anyone can visit msft and pick up the updates. One thing that is good about this thread is when there is some sort of IE8 compatibility hotfix that arises. The msft hotfix page typically does not list them.

Actually anyone with disposable time on their hands can maintain update lists. I'm kind of running out of disposable time these days. Lots of people said they'd help, nobody said they'd do.

[Martin H]

@TommyP:

Thanks for your reply, mate

I'm pretty sure that this will not help you at all, but just to make sure, then i'll state it nonetheless...

I can maintain the Win2k update-list with all OS-component flavors, if it is instead made a stickied thread here on the forum, and if it is only listing security updates and high-priority non-security updates i.e. non-optional ones...

The reasons for me not wanting to make update-lists, is that i refuse to spend time on anything not Win2k related, and since you want to have the Win2k list(and the others) as html(made with that excel spreadsheet of yours), and as i don't want to spend time learning html, or excel for that matter(i have no use for such things, so i've never bothered learning..).

Lastly, then i apologise for me posting links, but i only did it because it was an out-of-band update and not a regular patch-tuesday type...

Have a nice weekend, mate

[tommyp]

Martin - No need to apologize. The out of band update was appreciated. Most of the time, I miss the oddball ones like that. Actually I don't mind doing the 2k lists because I use it. The XP and the various flavors of IE and WMP and other non-essentials are a pita.