New Security Flaw Found In IE, Best Fire Up FireFox

[NormCameron]

New Security Flaw Found In IE, Best Fire Up FireFox

Jan 03

If you’re using Internet Explorer to read this it might be an idea to shut it down now and open up trusty old FireFox instead. Microsoft has today issued an alert to notify users of a critical security flaw in IE.7.0 that could allow hackers to take control of your computer and steal passwords. The company is apparently preparing an emergency patch to fix it but in the meantime simply requests that users remain ‘vigilant’ against the threat.Microsoft advisors actually ask that you don’t switch because they are trying to get it resolved as soon as possible. Of course it couldn’t be seen to recommend else’s software, but this doesn’t show much consideration for people’s security concerns. Trend Micro security advisor Rick Ferguson is free from such restraint: “In this case, hackers found the hole before Microsoft did, this is never a good thing. What we’ve seen from the exploit so far is it stealing game passwords, but it’s inevitable that it will be adapted by criminals; it’s just a question of modifying the payload the trojan installs. If users can find an alternative browser, then that’s good mitigation against the threat.” Alternative browsers FireFox, Opera, Chrome and Safari are not vulnerable to the flaw, so if you know what’s good for you best jump on one of these to be safe (most are better than IE anyway). - Paul Lester [BBC] security Internet Explorer Microsoft

New Security Flaw Found In IE, Best Fire Up FireFox | Newsglobal

 

[Barman58]

Thanks Norm,

Have not had a security notification from M$ yet on any "out of band" hotfix yet - If I see one will post it here for information

 

[mansrm81]

Thanks Norm gonna have to tell my sister to use Firefox now.

 

[Joe]

The post mentions IE7, but many of us with Windows 7 have IE8. Is IE8 also affected?

 

[Barman58]

Hi Joe,

Reading the original post from norm. as it states that this flaw was found by "hackers" before M$ it is possible that it's found it's way into IE8

Only M$ know for sure but is probably safer to assume it does exist in IE8

 

[NormCameron]

Hi Joe,

Reading the original post from norm. as it states that this flaw was found by "hackers" before M$ it is possible that it's found it's way into IE8

Only M$ know for sure but is probably safer to assume it does exist in IE8

Listen guys I think I've been had

I wonder how IE8 fits into this. :shock:

Another one Norm! Aww, man.

New Security Flaw Found In IE, Best Fire Up FireFox

Jan 03

If you’re using Internet Explorer to read this it might be an idea to shut it down now and open up trusty old FireFox instead. Microsoft has today issued an alert to notify users of a critical security flaw in IE.7.0 that could allow hackers to take control of your computer and steal passwords. The company is apparently preparing an emergency patch to fix it but in the meantime simply requests that users remain ‘vigilant’ against the threat.Microsoft advisors actually ask that you don’t switch because they are trying to get it resolved as soon as possible. Of course it couldn’t be seen to recommend else’s software, but this doesn’t show much consideration for people’s security concerns. Trend Micro security advisor Rick Ferguson is free from such restraint: “In this case, hackers found the hole before Microsoft did, this is never a good thing. What we’ve seen from the exploit so far is it stealing game passwords, but it’s inevitable that it will be adapted by criminals; it’s just a question of modifying the payload the trojan installs. If users can find an alternative browser, then that’s good mitigation against the threat.” Alternative browsers FireFox, Opera, Chrome and Safari are not vulnerable to the flaw, so if you know what’s good for you best jump on one of these to be safe (most are better than IE anyway). - Paul Lester [BBC] security Internet Explorer Microsoft

New Security Flaw Found In IE, Best Fire Up FireFox | Newsglobal

Norm

Pays to do LOTS of Research, particularly if you are a global news group, I guess also if you take their posts seriously. Must have been a slow newsday for this bunch, they quoted "today" in their post dated 3 January, 2009,

Does this look familiar, BBC News, 16th December, 2008


Serious security flaw found in IE

Internet Explorer is used by the vast majority of the world's computer users

Users of Microsoft's Internet Explorer are being urged by experts to switch to a rival until a serious security flaw has been fixed.
The flaw in Microsoft's Internet Explorer could allow criminals to take control of people's computers and steal their passwords, internet experts say.
Microsoft urged people to be vigilant while it investigated and prepared an emergency patch to resolve it.
Internet Explorer is used by the vast majority of the world's computer users.




BBC NEWS | Technology | Serious security flaw found in IE

Sorry Guys, I was fooled, maybe you weren't. My apologies.

Norm

Sorry again

Norm

 

[Barman58]

Hi Norm,

No need for embarrassment on your part

You saw something you believed needed to be shared and I for one would prefer to be warned of something that turns out to be unfounded, than not informed about something that proves to be a problem.

So please don't let this incident stop you posting your valuable information as and when you feel it's important

 

[grimreaper]

This is why I always used FF, as my primary browser.
How is it that hackers seem to shock M$ when a security flaw has been exposed, much later rather than sooner?
Ohh poor old M$, they really need to keep ahead of these guys or their creditability is gonna be doomed sooner than later.

 

[Pho3nix1991]

Hey Norm,

Thanks for the post even if it is old. At least you are trying to help better everyone's time spent on the computer. Much appreciated.

 

[NormCameron]

Hey Norm,

Thanks for the post even if it is old. At least you are trying to help better everyone's time spent on the computer. Much appreciated.

Thanks, though I felt a bit of a fool

Norm

 

[Pho3nix1991]

Thanks, though I felt a bit of a fool

Norm

Could be worse. My friend fell for the dumbest trick in the world. He used to play Runescape and someone ran up and said "The game blocks your password". So he typed in his password into chat...

 

[NormCameron]

Could be worse. My friend fell for the dumbest trick in the world. He used to play Runescape and someone ran up and said "The game blocks your password". So he typed in his password into chat...

LMAO

Norm

 

[TripOG]

isnt firefox like the most unsecure application for windows...
Application Control and Device Control Solutions - Bit9 News Releases

 

[NormCameron]

isnt firefox like the most unsecure application for windows...
Application Control and Device Control Solutions - Bit9 News Releases

I've read this article and it's been debated over at the Vista forums. My opinion is that the article is flawed and uses an unsupportable hypothesis to justify it's conclusions.

Norm

 

[TripOG]

i use ie and havnt had a virus sense running vista, but i think thats more to do with being an experienced internet user and knowing what im doing.

 

[NormCameron]

i use ie and havnt had a virus sense running vista, but i think thats more to do with being an experienced internet user and knowing what im doing.

Check the Security Forums on Vista64. If you haven't had a virus it has not much to do with experience. A good AV, regular scans for malicious software and regular backups are the best protection. Experience isn't a factor at all, luck and good fortune can play a part though!

Norm

 

[johngalt]

Exactly - with the number of hijacked banner web ads as well as the still not entirely fixed SQL injection hacks that are being purveyed through out the net, not running an AV / AM / something means you're been lucky.

Part of that luck in Vista can be attributed to UAC, but there are more than a handful of Trojans and rootkits out there int the world that are UAC sensitive....