Received: with ECARTIS (v1.0.0; list gopher); Tue, 02 Dec 2003 13:56:05 -0600 (CST) Return-Path: <spectre@floodgap.com> X-Original-To: gopher@complete.org Delivered-To: gopher@complete.org Received: from localhost (localhost [127.0.0.1]) by glockenspiel.complete.org (Postfix) with ESMTP id 3C2CA87 for <gopher@complete.org>; Tue, 2 Dec 2003 13:56:04 -0600 (CST) Received: from floodgap.com (netblock-66-159-214-137.dslextreme.com [66.159.214.137]) by glockenspiel.complete.org (Postfix) with ESMTP id 9BD471E for <gopher@complete.org>; Tue, 2 Dec 2003 13:56:02 -0600 (CST) Received: (from spectre@localhost) by floodgap.com (8.9.1/2003.05.26) id MAA13408 for gopher@complete.org; Tue, 2 Dec 2003 12:08:57 -0800 From: Cameron Kaiser <spectre@floodgap.com> Message-Id: <200312022008.MAA13408@floodgap.com> Subject: [gopher] The mystery is solved -- why IE6 works for Gopher in some places, and not others To: gopher@complete.org Date: Tue, 2 Dec 2003 12:08:56 -0800 (PST) X-Mailer: ELM [version 2.4ME+ PL39 (25)] MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 8bit X-Scanned-By: clamscan at complete.org X-archive-position: 853 X-ecartis-version: Ecartis v1.0.0 Sender: gopher-bounce@complete.org Errors-to: gopher-bounce@complete.org X-original-sender: spectre@floodgap.com Precedence: bulk Reply-to: gopher@complete.org List-help: <mailto:ecartis@complete.org?Subject=help> List-unsubscribe: <mailto:gopher-request@complete.org?Subject=unsubscribe> List-software: Ecartis version 1.0.0 List-Id: Gopher <gopher.complete.org> X-List-ID: Gopher <gopher.complete.org> List-subscribe: <mailto:gopher-request@complete.org?Subject=subscribe> List-owner: <mailto:jgoerzen@complete.org> List-post: <mailto:gopher@complete.org> List-archive: <http://www.complete.org/mailinglists/archives/> X-list: gopher

Burn in hell, Gates. If you aren't there already, I'll personally provide the bullet train.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-047.asp

If gopher is preferred (of course it is!), read

gopher://gopher.floodgap.com/0/gopher/ms02-047

This appears to be the reason why Internet Explorer 6 works for some people and not others -- the patch referenced by MS02-047 (Q323759) actually, by default, turns the Gopher service off *completely* in order to cover their collective fanny for an earlier buffer overrun gaffe dating from 5.01 that was not fixed until 6. It does claim to fix the buffer overrun, though (so, uh, why disable it if it's fixed?). The versions I have on my testing PCs all are patched, and they have historically been unable to get Gopher access.

If people are using IE6 to successfully browse gopherspace, please report if you have Q323759 installed (it should be under About Internet Explorer).

There is a registry key setting that will turn Gopher back on (detailed in the article), and I'm going to test it out tonight on both Windows 98 and Windows 2000 under Virtual PC on my desktop Macintosh. If others get the notion to give it a whirl, please advise if it works for you.

-- ---------------------------------- personal: http://www.armory.com/~spectre/ -- Cameron Kaiser, Floodgap Systems Ltd * So. Calif., USA * ckaiser@floodgap.com -- High explosives are applicable where truth and logic fail. -- Marcello Corno