Ads
Ads
All about Software
 Latest Software articles
Benchmarking Windows 7: Harder, Better, Faster, Stronger?

Benchmarking Windows 7: Harder, Better, Faster, Stronger?
Often hailed as the solution to Windows Vista performance problems, we wanted to know just how much better Windows 7 really is. We put one of our most recent test platforms through its paces to find out, benchmarking raw performance and responsiveness. Read More

  • How To: Windows XP Mode In...Ubuntu Linux?
    Windows 7's XP Mode has already convinced many users who sat out for Vista to go out and upgrade. But will they buy the right version of Windows 7 to get XPM? You do know you can get the same XP functionality from a Linux distribution for free, right? Read More
All Software articles

Newsletters


  • Ask your question about IT issues
  • Post

Partners

The Games selection

adventure : Scoobydoo: Episode 2 The sequel of Scooby and Sammy's adventures. Same principle as in the previous episode (available on this website). Click on "Instructions" to see...
crazy : Xiao Xiao 7 A great fight scene from the animation movies Xiao Xiao.
Ads

Sponsored links

China to Patch Flaws in Green Dam Censorware

Next news
1:51 PM - June 15, 2009 by Jane McEntegart

The Chinese government has ordered designers of the Green Dam censoring software to patch vulnerabilities that could allow hackers to take control of users’ computers.

In a detailed analysis last week, Scott Wolchok, Randy Yao, and J. Alex Halderman from the Computer Science and Engineering Division at the University of Michigan claimed to have found two major security vulnerabilities after only one day of testing the Green Dam software.

According to the report, the first vulnerability is an error in the way the software processes web sites it monitors, which the second is a bug in the way the software installs blacklist updates. However, both allow remote parties to execute arbitrary code and take control of the computer.

Speaking to the English language publication, China Daily, Zhang Chemin, general manager of Jinhui Computer System Engineering admitted that there were flaws, "just like any other software of this type" but went on to say that the company specializes in “producing internet filtering software rather than security.”

Zhang told CD that the government had asked the company to rush release security patches to fix the problems. "The Ministry of Industry and Information Technology told us to make the software safer as soon as a series of security vulnerabilities were found." Adding that programmers were working non-stop to develop fixes.

China has ordered that starting July 1, all computers must ship with the Green Dam software pre-installed on their computers. According to the Chinese government, the software is supposed to filter out pornographic content, however, recent analysis shows it also filters out political phrases too.

Source : Tom's Hardware US

Talkback
Add your comment
starryman 06/15/2009 8:12 PM
Hide
-5+

And what do they plan on doing with SPAM? We can't even filter out male enlargement and nigerian scams.

tenor77 06/15/2009 8:19 PM
Hide
-8+

Individual thoughts were still getting through!

Resistance is futile

tayb 06/15/2009 8:22 PM
Show
Pei-chen 06/15/2009 8:24 PM
Hide
-4+

Don't really know why this is still headline news but I see this vulnerability as no different than the vulnerability in EA download manager, Apple updates, Adobe update manager, etc.

Jerther 06/15/2009 8:41 PM
Hide
-2+

Quote :China has ordered that starting July 1, all computers must ship with the Green Dam software pre-installed on their computers.


I just thought about something... Will users be able to uninstall it? :)

tenor77 06/15/2009 8:42 PM
Hide
-6+

Jerther :
I just thought about something... Will users be able to uninstall it?



If they took a lesson from EA then the answer would be "No"

B-Unit 06/15/2009 8:44 PM
Hide
--2+

Pei-chen :
Don't really know why this is still headline news but I see this vulnerability as no different than the vulnerability in EA download manager, Apple updates, Adobe update manager, etc.


Except that no government requires EA download manager, Apple updates, or Adobe updates to be installed on every PC sold.

mavroxur 06/15/2009 8:53 PM
Hide
-10+

"However, both allow remote parties to execute arbitrary code and take control of the computer."


Ah, so the software is working exactly as the government designed it to I see....

grieve 06/15/2009 9:14 PM
Hide
-0+

FAIL

Hanin33 06/15/2009 9:22 PM
Hide
-1+

so, what ever happened to the idea that people could do whatever they wished to in their part of the world? sure it doesn't meet up to the 'standards' of the moment elsewhere... but has anyone stopped to think that that's just fine with the people this directly concerns? maybe our way of life isn't how they wish to lead theirs? are we not just projecting wot we interpret the way 'it should be' with the way we want them to live? i don't agree that a government should be allowed that much control over their constituents lives... but i also do not live in china and would move if that were the case here in the USA. i'm just saying.. *shrugs*

hellwig 06/15/2009 9:30 PM
Hide
-0+

When will people learn that it's not good software practice to allow a URL, command, input, email, etc... to re-direct the Program Counter to an arbitrary address in memory? STOP executing random addresses in memory and we'll all be fine. And shouldn't the execute enable bit on just about all modern processors have resolved this issue by now?

IzzyCraft 06/15/2009 9:36 PM
Hide
-0+

grieve :
FAIL


My guess is they knew about the security holes but when other people found out they didn't want hackers (besides their own) to take over people's computers, lol''

rubix_1011 06/15/2009 9:58 PM
Hide
-0+

Ministry of Love (torture) and Ministry of Peace (war) (Orwell's 1984).

China- Ministry of Industry and Information Technology. (oppressive overseeing via technology)

Hmmm...I don't see how any of these could be remotely related.

Ciuy 06/15/2009 10:25 PM
Hide
-1+

useless software. If CHina cant see porn, the whole porn industry is in for a crysis. :))

mavroxur 06/15/2009 10:34 PM
Hide
-0+

Ciuy :
If CHina cant see porn, the whole porn industry is in for a crysis. )




The whole country is going to play a first-person shooter?

anamaniac 06/15/2009 10:35 PM
Hide
-1+

Damn, I have to find another way to get porn...

rubix_1011 06/15/2009 11:04 PM
Hide
-0+

I think he actually means crisis vs crysis.

The Schnoz 06/15/2009 11:57 PM
Hide
-0+

Can't they just format the computer and do a fresh OS install?

Igot1forya 06/16/2009 7:13 AM
Hide
-0+

OEM's should ship the system with Green Dam installed but when booting for the first time should put an option to remove the software, similar to the way OEM's seem to load 3 antivirus's on new PC's and let the end user remove the programs they don't need.

"You are 2 step away from using your new PC!"
Step 1: - Uninstall Green Dam
Step 2: - Finish Setup

:)

eddieroolz 06/16/2009 12:02 PM
Hide
-0+

Huh, so it seems they do pay attention to Western reports...

annymmo 06/16/2009 4:20 PM
Hide
-0+

This is the perfect software for total domination of the information in China. Imagine everybody is forced to have it.
Discover one flaw, and hack all the public computers in china, all personal computers, all internetcafe computers, all government computers, all chinese secret service government computers!
(China's going to have a hard time keeping control over it's information!)
The flaws in the Green Dam software, there are anyway, will be exploited and the government will have an EPIC FAIL! What if the hackers make the the Green Dam software install their own software that automatically opens a page to free Tibet or porn! funny! Or imagine the governments documents hostilled by an unknown hacker!

Sponsored links

Related articles

  • Dell goes Green, introduces optional plant a tree purchase option

    Dell CEO Michael Dell announced that the company will be offering an inexpensive, around $2 - $6, option when buying a new computer to plant a tree which should offset the energy consumption of that machine.

  • Green Machine: AMD Dual-Core Platform at 54W

    AMD has introduced low-voltage versions of several of its Athlon 64 models, promising decreased power consumption and heat output for smaller systems. We compare these to standard parts to put this power savings in perspective.

  • China Dispatch: Adventures in Case Manufacturing

    How are PC cases made? After Computex in Taiwan, we made the trek to Dong Guan, China to learn about case manufacturing first hand. We spent more than two days watching the process and learning the "ins and outs" of the manufacturing process. We walk you through the full supply-chain gamut: design, engineering, prototyping, testing and production.