The FedEx headquarters in Memphis was hit pretty hard (or so I've been told).
I guess I should know better, but I still find it hard to believe any company would use microsoft software for "mission critical" operations. That the U.S.Navy uses Xp just boggles my old mind.

Apparently we got lucky here in the US. The "Accidental Hero" stopped the spread before it got very far here.

Microsoft has announced that they are fixing the vulnerable versions of Windows including some versions that they have already dropped support for. The vulnerable versions that Microsoft intends to fix are Windows 10, Windows 8, Windows 7, Windows Vista, and Windows XP.

https://www.ft.com/content/348d4f7a-...a-6027b8a20f23

So what version of Windows is not vulnerable?

----------------------
Steve Stites

Isn't that a rhetorical question ?.

This is a wake up call. I say, stop using ancient operating systems! Use anything but windows XP or vista.

If there is ever a big cyberwar of the top countries the losers will obviously be using windows XP or vista

This is how it works

http://blog.talosintelligence.com/2017/05/wannacry.html

Dugan already posted that one!

Isn't that a rhetorical counter-question?

Or Vista 10 or Vista 11 or whatever the "current" version will be at the time of the next attack.

From reading the last few weeks, it looks like all versions of Vista were affected for a long time, even Vista 10 which is the latest. It was so long a period that the NSA had time to develop and deploy malware to exploit that specific hole, with M$ knowledge. The problem there is that the malware got loose. Only recently did M$ patch the newer editions of Vista so that they could then steer the press into blaming old XP and take the heat off of Vista 10. I wonder if it was the Wikileaks reports that forced their hand and got them to patch Vista 10 and how long M$ would have left things unpatched had Wikileaks not reported on the problem(s).

Windoze has never been secure and always been a magnet for malware even back before it had a TCP/IP stack. The more things change the more they stay the same. What needs to happen now is a staff audit. Who allowed deployment of Windoze inside NHS?

I was going to ask if that story was true. If it is, it just illustrates the point I made before: you can't have a system that is secure against criminals, and at the same time insecure against the government (e.g. for the purpose of catching terrorists). Theresa May and Amber Rudd think that's possible and seemingly the NSA thought so too, but the laws of arithmetic don't allow it.

A back door is a back door is a back door!

PS: Vista may be insecure but does anyone actually use it? ISTR that when it came out, it was wildly unpopular and no one wanted to use it.

And there are people that don't trust things like selinux because of the NSA entanglements.
No wonder we are all paranoid.

I do, since it came with the laptop I use to run some model railway software I can't do without and to update the maps on my satnav (which needs interweb access). The latter is particularly annoying - why does garmin think it sensible to only allow a windows machine to talk to their android device?

I'm just trying to work out what new powers and laws the government is going to demand on the back of this. Making vulnerability scanners illegal, perhaps? Insisting that everyone register their email addresses and Windows license keys with the government? Or will this mean that the NHS needs to be sold off to private investors "who can afford to spend money on infrastructure"?

I expect that the person or persons who did it will get caught sooner or later and spend a very very long time in prison. So far it appears they have only made a comparatively small amount of money out of it.

I am surprised that the NHS does not use a separate network, either physically or virtually.

I would have thought that the NHS and other government bodies are big enough to finance the creation or adaption of a separate secure OS that is not available to the public.

Only if they're in the extradition zones for the countries affected. Otherwise they'll get away with it or be hired by their government.