Update on Security Advisory 2286198

Microsoft has updated Security Advisory 2286198 and it now clarifies that:"The vulnerability exists because Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the icon of a specially crafted shortcut is displayed."Displayed is the important keyword. This is good and addresses our earlier concerns.However, the advisory still reads that:"For Windows 7 systems, AutoPlay functionality for removable disks is automatically disabled."This is still inaccurate. Or at least, it's not accurate enough. We know what Microsoft is trying to say but we think some folks might misinterpret. It would be better to state that AutoPlay functionality for removable disks is automatically LIMITED.Take a look at our Windows 7 test machine, which was hardened, this is a button in the AutoPlay Control Panel:"Reset all defaults."So we opted to restore the defaults:"Use AutoPlay for all media and devices" is now enabled. That's ALL media and devices.This is the dialog that was presented when a USB flash drive containing multimedia files was inserted into the Windows 7 system: (continue reading...)