Every one, if I were you, I would ditch IE and use Firefox/Chrome/whatever as a browser. Stay away from IE until MS can make a fix.
Full Story Here: http://ca.news.yahoo.com/s/afp/081216/technology/us_china_it_internet_software_crime_microsoft (http://ca.news.yahoo.com/s/afp/081216/technology/us_china_it_internet_software_crime_microsoft)
Just in case any of you didn't know, its better to be safe then sorry.
I thought this had been fixed already.
I think there's a fix for this, but still, any browser is better than IE.
(Also, congrats, your posting looks like it's improved) :)
Who around here would be stupid enough to use IE anyway? :P
(http://www.overminddl1.com/image_scripts/image_sig.php?type=ODL1signitures&image/sig.gif)
Generated by OvermindDL1's Signature Auto-Add Script (http://overminddl1.com) that OvermindDL1 did manually since Greasemonkey does not work in Firefox 3.1 yet...
Quote from: SkyNET on December 18, 2008, 02:30:19 AM
I think there's a fix for this, but still, any browser is better than IE.
(Also, congrats, your posting looks like it's improved) :)
ty i tried this time :D
That patch for ie regarding that was released today. Also on another note mac is now becoming infected with viruses. Macs are no longer immune.
Save it for the PC v Mac thread. Don't use IE.
VSMIT.
IE is WILDLY popular, and thus the target of the most attacks.
Point to take from this, don't be a corporate clone, grow some brain and use something else.
I don't think I know anybody (personally) except myself who does not use IE.
i used to, now i use firefox. probably some geek in his garage writing viruses for that now...
Firefox? Have you seen their famous commerical on youtube?
IE does not suck, it works very well. The issue is most people run IE in ADMIN mode. Vista at least put in UAC which makes all browsers run with user rights, not admin rights. Back in XP, I used a program called 'stripmyrights' that loaded IE, Firefox, etc in non-admin mode.
As for the other browsers, they can be just as vulnerable as IE. There are these things known as zero-day exploits, which most, if not all, have. In other words, exploits that have not been DISCOVERED or if they have, are only known by the attack community. Google Chrome has had exploits found in it:
QuoteSynopsis :
The remote host contains a web browser that is affected by multiple
vulnerabilities.
Description :
The version of Google Chrome installed on the remote host is earlier
than 0.2.149.29. Such versions are reportedly are affected by several
issues :
- A buffer overflow involving long filenames that display
in the 'Save As...' dialog could lead to arbitrary code
execution (Issue #1414).
- A buffer overflow in handling of link targets displayed
in the status area when a user hovers over a link could
lead to arbitrary code execution (Fix #1797).
- An out-of-bounds memory read when parsing URLs ending in
':%' could cause the application itself to crash (Issue
#122).
- The default Downloads directory is set to Desktop, which
could lead to malicious cluttering of the desktop with
unwanted downloads and even execution of arbitrary
programs (Fix #17933).
See also :
http://code.google.com/p/chromium/issues/detail?id=122
http://code.google.com/p/chromium/issues/detail?id=1414
http://googlechromereleases.blogspot.com/2008/09/beta-release-0214929.html
Solution :
Upgrade to Google Chrome 0.2.149.29.
Risk factor :
High / CVSS Base Score : 9.3
So stop bashing IE as being 'unsecured', it is just like Nielk1 says, there are more IE users out there and thus attackers focus more on IE.
Or, in short, nothing and nobody is safe.
Just that other browsers generally get a pretty immediate patch to fix such things, where-as IE sits in its own bugs for a month before a patch, if a patch comes out for the bug (still so very many bugs that are not fixed).
I would probably bet money that Lynx is the safest browser. :P
(http://www.overminddl1.com/image_scripts/image_sig.php?type=ODL1signitures&image/sig.gif)
Generated by OvermindDL1's Signature Auto-Add Script (http://overminddl1.com) that OvermindDL1 did manually since Greasemonkey does not work in Firefox 3.1 yet...
It's a pity IE is the only browser that supports the ever-so flashy Piclens.
Piclens (renamed to Cooliris like, a long time ago) has ran on other browsers just fine for a very long time. What on earth are you going on about?
(http://www.overminddl1.com/image_scripts/image_sig.php?type=ODL1signitures&image/sig.gif)
Generated by OvermindDL1's Signature Auto-Add Script (http://overminddl1.com) that OvermindDL1 did manually since Greasemonkey does not work in Firefox 3.1 yet...
Oh, I thought it had been renamed too Piclens. Which other browsers does it run on? Must be one I haven't tried yet.
For programmers, http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx (http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx) is a good description of the recent IE bug, and its fix.
-- GSH
I've got CoolIris on Firefox. It's really nice.
VSMIT.