Major flaw revealed in Internet Explorer; users urged to switch

[Dixiebelle]

This just hit my Yahoo news page today. I thought everyone who has not seen this should. I'm changing to Firefox - permanently...

***********

Major flaw revealed in Internet Explorer; users urged to switch
***********************************************

Buzz up!on Yahoo!The major press outlets are abuzz this morning with news of a major new security flaw that affects all versions of Internet Explorer from IE5 to the latest beta of IE8. The attack has serious and far-reaching ramifications -- and they're not just theoretical attacks. In fact, the flaw is already in wide use as a tool to steal online game passwords, with some 10,000 websites infected with the code needed to take advantage of the hole in IE.
Virtually all security experts (as well as myself) are counseling users to switch to any other web browser -- none of the others are affected, including Firefox, Chrome, and Opera -- at least for the time being, though Microsoft has stubbornly said it "cannot recommend people switch due to this one flaw." Microsoft adds that it is working on a fix but has offered no ETA on when that might happen. Meanwhile it offers some suggestions for a temporary patch, including setting your Internet security zone settings to "high" and offering some complicated workarounds. (Some reports state, however, that the fixes do not actually work.)
Expedient patching or switching are essential. Security pros fear that the attack will soon spread beyond the theft of gaming passwords and into more criminal arenas, as the malicious code can be placed on any website and can be adapted to steal any password stored or entered using the browser. It's now down to the issue of time: Will Microsoft repair the problem and distribute a patch quickly enough to head off the tsunami of fraud that's about to hit or will it come too late to do any good?
Meanwhile, I'll reiterate my recommendation: Switch from Internet Explorer as soon as you can. You can always switch back once the threat is eliminated.
Links for other browsers to try: Firefox Chrome Safari Opera

Also, here's a link to BBC News report concerning this problem:
BBC NEWS | Technology | Serious security flaw found in IE

**********

Hope this helps everyone make an educated decision. I have seen a lot of complaints on this forum lately, about sights and servers being hacked. Sofar, I haven't had that problem, but don't intend to take any chances.

Dixie

[spearce000]

Thanks for that. I've been a dedicated Firefox user for several years now. Glad I decided to switch.

Shaun

[Michael Oksa]

Originally Posted by spearce000

Thanks for that. I've been a dedicated Firefox user for several years now. Glad I decided to switch.

Shaun

Hi Shaun,

This time you're fine, but don't think you will always be invulnerable. From the same article (emphasis added)...

PC Pro magazine's security editor, Darien Graham-Smith, said..."Every browser is susceptible to vulnerabilities from time to time. It's fine to say 'don't use Internet Explorer' for now, but other browsers may well find themselves in a similar situation,"

This isn't about which browser is "better", why is it that FF and Mac users are the loudest about how great their stuff is? FF and Mac have their share of problems, whether they want to admit it or not.

Anyway, I use FF most of the time, but have not drank the Kool-Aid yet.

Just having a bit of fun, but it is not a good idea to get complacent just because you think you are using a browser or computer that won't be the vicitm of a virus.

All the best,Michael

[John Henderson]

Michael, you make a good point. It's the widespread use of a single browser (IE has a 70% share) that makes it such a target for malicious hackers. By simply not following the herd and using one of the less popular browsers, you are distancing yourself from that big target.

The browser I use is either Safari or Camino on a Mac, but I don't feel smug when I hear that thousands (millions?) of ordinary people are going to be affected by yet more crap software coming out of Microsoft -- in fact, I feel horrified.

As I said to Kim W, I don't tell regular computer users to buy a Mac because I'm on the side of Apple -- I tell them because I'm on the side of the regular computer users.

[jjpmarketing]

Although I didn't read the article, I almost have to assume it is related directly to the "Flash Gaming Sites". Those sites are almost always loaded with spyware and malware. Just proves that you should be careful what websites you visit. The sites that have tons of ads more times than not will contain some form of adware or spyware.

[LeapingHorse]

Just curious - is there types of spyware that spyware removers or virus programs can't detect? I have a couple of different spyware scanners I use and guess I always assumed I'm ok - am I just naive?

[GeorgR.]

what's that "internet explorer" you are talking about? I really only use it for compatibility testing

Originally Posted by Michael Oksa

Hi Shaun,

This time you're fine, but don't think you will always be invulnerable. From the same article (emphasis added)...




This isn't about which browser is "better", why is it that FF and Mac users are the loudest about how great their stuff is? FF and Mac have their share of problems, whether they want to admit it or not.

Anyway, I use FF most of the time, but have not drank the Kool-Aid yet.

Just having a bit of fun, but it is not a good idea to get complacent just because you think you are using a browser or computer that won't be the vicitm of a virus.

All the best,Michael

Michael,
The reason being is because a Mac user such as myself .. Which owns 6 Mac computers (oldest one Performa 6116 PowerPC built 13 years ago) all of which still run and I have never had to do the following.

1. Install Virus Protection
2. Rebuild My Hard Drive from a Crash
3. Never Lost My Hard Drive Contents
4. Never Been Hacked
5. Never Had Spyware On My Hard Drive

Basically I never had to worry about none of the stuff windows users do. I save thousands by not needing repairs or virus protection.

As for the OP and IE - Developers have been telling people this for years ...

James

[Charles Harper]

IE has made it impossible for me to operate my 4GB RAM laptop. I have switched to Chrome and finally feel some power. I could not run Skype, IE and Outlook together. Hardly unreasonable to request my PC to do that. So this recent report is just another confirmation for now that I can shelve IE. My backup is now FF.

[jjpmarketing]

Originally Posted by LeapingHorse

Just curious - is there types of spyware that spyware removers or virus programs can't detect? I have a couple of different spyware scanners I use and guess I always assumed I'm ok - am I just naive?

While using anti-spyware and anti-virus helps... it isn't 100% effective. You still have to be careful of the sites you visit, and the files you download.

The only 100% effective way to prevent computer viruses and malware is by unplugging your internet connection. Just make certain you use the programs that help protect you, watch what you do online, run scans on a consistent regular basis, and make backups as often as possible of important data to an external hard drive.

[Michael Oksa]

Originally Posted by jjpmarketing

While using anti-spyware and anti-virus helps... it isn't 100% effective. You still have to be careful of the sites you visit, and the files you download.

The only 100% effective way to prevent computer viruses and malware is by unplugging your internet connection. Just make certain you use the programs that help protect you, watch what you do online, run scans on a consistent regular basis, and make backups as often as possible of important data to an external hard drive.

That's not true. The only way to remain immune is to get a Mac.

~Michael

Originally Posted by Michael Oksa

That's not true. The only way to remain immune is to get a Mac.

~Michael

Watch it Michael, that sounds close to an advertisement for telling people to switch ...

James

[Steven Fullman]

Originally Posted by Michael Oksa

That's not true. The only way to remain immune is to get a Mac.

~Michael

Michael,

That's not true, either, mate.

What makes a Mac immune? Answer: Its small market share.

But it's increasing. Virus writers are now targetting the Mac OS...not because it'll get them a huge bot-net army, but because it's comparitively easy pickings (because Apple's marketing campaign is big on immunity, right?)

The only way to keep virus-free is to stay off the net. Boring, but true. Everything else needs precaution. THAT piece of advice is platform-independant.

Steve

[imaddict]

Originally Posted by spearce000

Thanks for that. I've been a dedicated Firefox user for several years now. Glad I decided to switch.

I second that! Last year bought a new laptop and couldn't get rid of the crappy promotional tabs that Best Buy computers come loaded with. Every time I would open up the browser it would take 10-15 seconds before I could search/surf. Switched to Firefox and haven't looked back since.

[snidge]

I design & develop websites. I can tell you first hand that FireFox has problems too. Major things like just forgetting to add header redirect. lol Also people act like IE is so far behind... If you confuse FF at all with a code, the entire page will go crazy lol. IE is ahead of the game obviosuly because of Microsoft but if you look at the competition, it is well worthy of #1.

Also before you go switching over to FF in a heartbeat.. Take a look at how ugly every site looks compared to IE lol.

I don't know. I'm not a huge fan of Firefox.

Originally Posted by Steven Fullman

Michael,

That's not true, either, mate.

What makes a Mac immune? Answer: Its small market share.

But it's increasing. Virus writers are now targetting the Mac OS...not because it'll get them a huge bot-net army, but because it's comparitively easy pickings (because Apple's marketing campaign is big on immunity, right?)

The only way to keep virus-free is to stay off the net. Boring, but true. Everything else needs precaution. THAT piece of advice is platform-independant.

Steve

Hi Steve,
What gets me is why does everyone thing Macs are in a small market .. Honestly over 100 Million Macs are online and that number is from several years back.

If you sold a $27 product to just 1% would you consider that a small market share ??

I think I would be a happy camper if I sold a product to that many users.

Oh by the way for the record I run neither FF or IE (IE Sucks always has and it can not view sites in a proper way). I run Netscape, yeah the browser that AOL dumped after years..

James

[snidge]

That's not IE's fault. If the computer came pre-loaded with FF you would have the same problem and be switching over to IE.

Sorry for the double post lol

Originally Posted by imaddict

I second that! Last year bought a new laptop and couldn't get rid of the crappy promotional tabs that Best Buy computers come loaded with. Every time I would open up the browser it would take 10-15 seconds before I could search/surf. Switched to Firefox and haven't looked back since.

[zerofill]

When your comparing MAC, Linux, Windows...
Of which I use Linux the most...
You really can't compare apples to apples here...
People write viruses to attack Windows because

1) Windows is the most widely used
2) Most people have their user they login under in windows set as an administrator...

Microsoft has slowly been taking ideas from Linux on security...they just haven't done well implementing them.

[Habbit]

For added protection to your browser try keyscrambler premium...(try google it).Most of the attacks are after to place a keylogger on your system to collect everything you type on the keypad,the above software can certainly provide peace of mind.The free application protects only browser .

[jjpmarketing]

I use both IE and Firefox. Both have their good and bad points. You shouldn't be talking about the Apple market share. It is fighting an uphill battle against a Mt. Everest PC Market share.

The real market share to be focusing on is apps for the iPhone. Pay a programmer a few thousand dollars to write an app for the iPhone, then you are looking at some serious pay dirt. They (referring to the iPhone itself) are like the PC's were in the 80's and 90's... a booming business.

Imagine getting in on the ground floor with a great iPhone app. That would get your app in front of a lot of people. Now imagine giving that app away for free, but using some email capture system they need to register with so they can receive "important updates" to their app.

That would create a nice chunk of change on a monthly basis.

[Michael Oksa]

Originally Posted by Steven Fullman

Michael,

That's not true, either, mate.

What makes a Mac immune? Answer: Its small market share.

But it's increasing. Virus writers are now targetting the Mac OS...not because it'll get them a huge bot-net army, but because it's comparitively easy pickings (because Apple's marketing campaign is big on immunity, right?)

The only way to keep virus-free is to stay off the net. Boring, but true. Everything else needs precaution. THAT piece of advice is platform-independant.

Steve

Hi Steve,

Looks like my attempt at British humor fell flat.

I know Macs are not immune, no computer is, but I figured my post was better than arguing.



All the best,
Michael

[jjpmarketing]

To sum up your Mac Analogy:

Out of sight, out of mind.

[cscott5288]

I read this today...the threat is completely blown out of proportion. Think about it: a major security breach in IE, just soon after the official Google Chrome Release...The article even has a link to the Google Chrome downloading page!

Brilliant advertising, but not a surprise to me. This will certainly loosen Microsoft's grip on internet browser domination...can't say that's a bad thing though.

[jjpmarketing]

Honestly... I read something about "BBC News" having to make retractions a lot for "oh we thought it was true at the time" reports. And with reporters fabricating stories these days... and politics having the media firmly in their control... you can't really believe everything that is reported.

The media doesn't report facts anymore... they report speculation surrounding a fact taken out of context. I'm not saying that was the case with the BBC report... but you never know.