Another Intrusion at MS Second Intrusion in a Week Byron Alley
A second intrusion at Microsoft's site is leaving some doubt about the company's approach to security. A Dutch hacker using the alias "Dimitri" demonstrated the security flaw, which was different from the hole exploited by the well-publicized intrusion of a few days before. While the security breach only affected Microsoft's web server, Dimitri pointed out the potential severity of this type of attack.
He was able to upload files to the server. This meant that, "I could add Trojan horses to software that Microsoft customers download," Dimitri pointed out.
"We investigated this report," Microsoft spokesman Adam Sohn said. "He was able to exploit a known security flaw that we were able to patch. The patch had not yet applied to the server." He could not confirm that all servers in Microsoft's network had the hole patched.
