Hacker News Reader

Comment by remx | Hacker News Reader

This is what I want to know[0] too.

To mitigate, you can disable SMB1.0 with the following command. Make sure to run as administrator:

    dism /online /norestart /disable-feature /featurename:SMB1Protocol

[0]: https://news.ycombinator.com/item?id=14335845

View on HN

To mitigate, Install Security Patches in a Timely manner.

Also note that only works on windows 7 and later, dism is not a tool for XP or Windows 2003 which seem to be the largest numbers hit by this since there is/was no patches for them

Careful, most old scanners out there only talk SMB1.

I'm all for recommending defence in depth, but please study changes like this before doing them.

Reply on news.ycombinator.com