BuBBy
offlineAdministrator
Microsoft have announced users of Internet Explorer should use a different browser until they develop and release a fix that potentially allows a visited website to take control of the users PC performing actions such as accessing user passwords.
For the latest:
http://news.google.com/news?ned=us&ncl=1280059446&hl=en&topic=t
(I believe this link is OK to view with Internet Explorer - but I can't promise it).
luv my Firefox. ;)
RunesageMagik
offlineMember
IE just presents the biggest target, but FF users shouldn't get too cocky. As its popularity increases, good chance the chinese are diligently looking for flaws in FF code, too. IMHO, this is another justification for expressing rational concern about all the free software dubious sources shovel out to an unsuspecting public. Anyone who scoffs at prognostications that some of it might contain hidden exploitable code ignores reality. The temptation to steal passwords and personally identifiable info on a massive scale looms large.
Potential Workarounds, interesting read for geeks.
If anyone wants a step by step guide to changing default browsers, try this.
RunesageMagik
offlineMember
Once upon a time in the land of denial there lived a FireFox enthusiast named Little Red Riding Hood. She felt safe from the vicious hackers who preyed on IE. Then, one day while she was picking flowers, she heard footsteps. Turning, she gasped, for there was Grandma, only this granny had big ears and big eyes and 10 big teeth. Granny quickly ate Little Red Riding Hood's lunch. The end.
Anyone who wants to quickly check to see if/when Microsoft releases a muzzle for the big bad wolf du jour can try clicking here. Caveat emptor. Sometimes it's best not to be first to download something from Microsoft. "Let Mickey eat it."
Looks as if F-Secure is first out of the gate with a Free Patch to protect against the zero-day type exploits. Can't vouch for it, don't know what the catch is. I am always suspicious of the phrase "free download."
watcher13
offlineMember
Thanks for the heads up on the Firefox update, Rune. I had a little problem getting used to a couple of the security add-ons I made and have been falling back on IE. Guess I'll need to tackle it a again, but you're right. The days of Firefox completely flying under hacker's radar are probably over. "My Grandma! What big viruses you have!" "All the better to hack you with, my dear!"
RunesageMagik
offlineMember
Watcher, Bubby will undoubtedly be amused to know that a few months back I finally and begrudgingly installed FF on my PC, and since last weekend have used it as the default browser to hopefully avoid becoming entangled with the several million infected sites/computers. I really don't like some of FF's idiosyncrasies, and I honestly have absolutely no idea how well it dovetails with my existing security; but despite the discomfort, it isn't creating any major snafus with day-to-day surfing. What are ya gonna do? The only 100% guaranteed perfect patch is the OFF switch.
Quick reminder - because the nimrods at MSFT aspire to be user-unfriendly ... if you took any precautions in the past few days such as raising your IE security settings to HIGH, that may impact whether you even GET a download patch from the idiots, because they use ActiveX scripting and a HIGH setting blocks it. I completely forgot about that until I tried going to the MSFT Download page via the HELP & SUPPORT Page. doh
mosweetie53
offlineMember
If I might add something. Please don't ask if I lost my mind however I installed IE 8 beta yesterday and nothing absolutely nothing worked right since. I am now back to IE 7 and no I don't really like Firefox. I know alot of people do like Firefox better. It is probably just me not knowing the in's and out's of Firefox. I just feel like IE is an old friend. I did however learn my lesson on anything Beta
BuBBy
offlineAdministrator
Ironically, Firefox also released 3.0.5 to address critical security flaws.
Actually there is nothing ironic about it at all - The firefox fixes are unrelated to the Microsoft exploit.
One of the things I like. Firefox bugs are usually fixed proactively (There are no widespread exploits).
Microsoft bugs are often fixed reactively - as damage control.
At least to the credit of Microsoft, they did announce when the problem seemed to be getting worse, that users should use an alternative browser. To fail to do this and keep it "quiet" until a patch was ready - would be very wrong.
As a side note - with Mozilla, you can review the status of any issue or bug that is being worked on - you can read discussions between the developers, the reasons behind some decisions, you can send messages or suggestions - everything is entirely open - you can email the developer who is working on your fix etc. When was the last time you were able to read a Microsoft developers notes and see the progress of the resolution of a bug you are waiting on? Can you see how a particular fix was tested? As interested as you want to be, you can be involved in the future of Firefox. With Microsoft, apart from putting your suggestion into the feedback box and hoping that someone reads it - anything beyond that is "confidential" and you might get to see what they are doing when the next beta gets released to everyone.
@ mosweetie53
I downloaded IE 8 Beta several weeks ago and it did "OK". I just got the security update for 8 beta a little bit ago so check MS for the update because they have it.
I do know what you mean about IE but I'm an avid FF user now and got involved with helping in the coding of Minefield which is even faster that FF.
Mercurius
offlineMember
To all IE "haters" being at the same time FF "lovers" (like me), read the following article by Mark J. Edwards and feel happy!
http://windowssecrets.com/2008/12/17/02-Microsoft-patches-IE-but-Firefox-is-still-safer/?n=story1 , esp. paragraph "IE zero-day flaws cry out for switch to Firefox"
Excerpt: "Use IE only to visit sites that require Microsoft-specific technology — probably because they rely on ActiveX to function. (For example, you need to use IE to download patches at the Windows Update site.)"
You do not need IE to download patches at the Windows as I download with Firefox ok I just don't used IE just Firefox and Opera you need to run Scripts if you got no Script mic will tell you,click download IE take years to fix Firefox and Opera 30 day's max you may like to look and see all not to good,
http://lifehacker.com/5111184/security-experts-advising-you-stay-off-internet-explorer-for-now
You must log in to post.
