Internet Explorer security flaw

Disc Jockey

I just heard about this today but it's apparently been known about for a few days. Mostly centered in China and used to get gaming passwords but can be adapted to get passwords of many types. The exploiter can be installed on legit sites to attack IE

story here: http://voices.washingtonpost.com/securityfix/2008/12/microsoft_big_security_hole_in.html

MS aadvisory here: http://www.microsoft.com/technet/security/advisory/961051.mspx

List of workarounds here: http://blogs.technet.com/swi/archive/2008/12/12/Clarification-on-the-various-workarounds-from-the-recent-IE-advisory.aspx#workarounds

Obviously, easiest thing is to use something other then IE for now.

exalted512

Google officially released Chrome now(non-beta)...sounds like a good time to switch over.
-Cody

Serendipity

IE's been working fine for me right now, but if these security vulnerabilities continue I might consider switching to Firefox.

Motzart

I got wacked about a week ago with adware and a backdoor trojan.
My registry was a mess and wouldn't let me get to Microsoft or AVG.
Took me 2 days to get it straight finally with STOPzilla.
Firefox is now installed and I use it for my critical web work now.

Conradicles

Motzart wrote: »

I got wacked about a week ago with adware and a backdoor trojan.
My registry was a mess and wouldn't let me get to Microsoft or AVG.
Took me 2 days to get it straight finally with STOPzilla.
Firefox is now installed and I use it for my critical web work now.

I love Firefox.

shack

MS is releasing an emergency patch tomorrow.

http://news.yahoo.com/s/afp/20081216/ts_afp/uschinaitinternetsoftwarecrimemicrosoft

Serendipity

My IE recently got attacked but everyone was telling me it was because of malware. Turned out to be a hacked router that was redirecting web pages.

So switching to Firefox wouldn't have done anything - I'd have the same problem even if I were on a Mac!!

(speaking of which, a friend of mine got a virus on his Mac)

Motzart

shack wrote: »

MS is releasing an emergency patch tomorrow.

http://news.yahoo.com/s/afp/20081216/ts_afp/uschinaitinternetsoftwarecrimemicrosoft

Hey Microsloth's middle name "PATCH" :mad:

Can't make nothing right the first time.....charge ya big bux for their programs....makes Guniea Pigs out of it's users....been doing it since day one!!

bobman1235

If you're still using IE instead of the far superior alternatives, you deserve this.

sucks2beme

appadv wrote: »

So switching to Firefox wouldn't have done anything - I'd have the same problem even if I were on a Mac!!

(speaking of which, a friend of mine got a virus on his Mac)

Mac's are so full of holes, it isn't even funny. At some point hackers are
going to get tired of beating up MS and go for the easy pickings.

Airplay355

Why are they full of holes? Just wonderin...

I have a Mac and I've never had a problem with anything. Not trying to be a fanboy, just stating my experience.

disneyjoe7

Why pick on something full of holes, when PC's are 8 to 1 on causing heck? (Note just my $.02 here, don't quote me on the facts jack)

Serendipity

Airplay355 wrote: »

Why are they full of holes? Just wonderin...

I have a Mac and I've never had a problem with anything. Not trying to be a fanboy, just stating my experience.

I'm not really sure why, but I do know they can be susceptible to malicious code (like my friend that got his Mac infected)...

I was just trying to say that no OS is 100% safe, that's all

exalted512

Airplay355 wrote: »

Why are they full of holes? Just wonderin...

I have a Mac and I've never had a problem with anything. Not trying to be a fanboy, just stating my experience.

Because they can be really. They dont have to fix it because not many people target them. But the with the increasing numbers of people getting Apple, I would expect theyre going to start getting a lot more viruses. People are under the false assumption that Mac's are more 'virus-proof' than PCs. In fact, the opposite is true. Its just that there are many, many more numbers of PCs than Macs. And if youre going to make a virus, you might as well make one thats going to affect more people.
-Cody

PolkThug

People still use IE?

jeffwalter

disneyjoe7 wrote: »

Why pick on something full of holes, when PC's are 8 to 1 on causing heck? (Note just my $.02 here, don't quote me on the facts jack)

You are on the right track with your logic - it is definitely because there are so few Mac's around. If someone is interested in causing trouble they are going to shoot for the largest target. And you are also correct in assuming that your numbers are off. I work for the number 1 PC manufacturer in the world. We build and ship more PC's in 1 day than Apple builds and sells for the entire year. We are just one of the 3 largest - it is more like 10,000 - 1:)

Apple sells a lot of MP3 players and now a respectable number of cell phones. People commonly mistake this as making them a volume player in the world of consumer electronics. I personally own 1 MP3 player and 1 cell phone but I have 6 PC's in my house.

Regards,
JW

bobman1235

Look, I'm a PC guy, but anyone who thinks that Apples are "full of holes" need to do a tad bit of research. Yes, a large reason they don't get viruses is because they're not targeted, but the other large reason is that they're based on a much more secure foundation. I'd love to know where you guys get your info that it's "full of holes", aside from it being something you want to be true, or heard from someone.

Serendipity

With regards to Macs - I'm not really sure if they are really "full of holes" like someone said in this thread, but I do know that they are not virus-proof.

John30_30

appadv wrote: »

My IE recently got attacked but everyone was telling me it was because of malware. Turned out to be a hacked router that was redirecting web pages.

So switching to Firefox wouldn't have done anything - I'd have the same problem even if I were on a Mac!!

(speaking of which, a friend of mine got a virus on his Mac)

I'd be interested to know what you did to clean your router, as well as more details about the Mac virus....?

Serendipity

John30_30 wrote: »

I'd be interested to know what you did to clean your router, as well as more details about the Mac virus....?

I just did a factory reset on the router. That cleared the DNS settings and then I proceeded to put a new password on the router.

mmadden28

exalted512 wrote: »

Because they can be really. They dont have to fix it because not many people target them. But the with the increasing numbers of people getting Apple, I would expect theyre going to start getting a lot more viruses. People are under the false assumption that Mac's are more 'virus-proof' than PCs. In fact, the opposite is true. Its just that there are many, many more numbers of PCs than Macs. And if youre going to make a virus, you might as well make one thats going to affect more people.
-Cody

+1 Absolutely-That and Microsoft is a huge target, thus more resources are directed that way.

disneyjoe7

With all this talk about security, no wonder large companies run Intranet over Internet networks.

mmadden28

appadv wrote: »

With regards to Macs - I'm not really sure if they are really "full of holes" like someone said in this thread, but I do know that they are not virus-proof.

+1 - True dat
Mac and other Unix/Linux variants cannot rest on thier laurels. As far as Browser related malware--most apps like Firefox, etc are simply ports with the same base code and thus can suffer the same vulnerabilities regardless of the OS. There may not be as many application and OS level vulnerabilities, but they do exist.

mmadden28

disneyjoe7 wrote: »

With all this talk about security, no wonder large companies run Intranet over Internet networks.

What do you mean?

mmadden28

Motzart wrote: »

I got wacked about a week ago with adware and a backdoor trojan.
My registry was a mess and wouldn't let me get to Microsoft or AVG.
Took me 2 days to get it straight finally with STOPzilla.
Firefox is now installed and I use it for my critical web work now.

You do know that you can get malware and viruses other than via a web browser right? Email being one of the biggest purpetrators. Network connected systems being another. Warez is also one of the biggest sources.

Motzart, which unpatched Internet Explorer vulnerability did you have that was exploited that caused you to get infected?

disneyjoe7

Large companies run websites which only work internal to them. Also may run networks which only work internal of them.

mmadden28

disneyjoe7 wrote: »

Large companies run websites which only work internal to them. Also may run networks which only work internal of them.

Ah, I see what you're saying. But thats not a total security solution there either. These large companies also have employees that have access to the internal networks that surf the web, read email, install apps, let thier kids install games, connect to unsecure networks, connect to thier home network with the work laptop without ensuring the home network is secure, etc. etc etc...thus providing a catalyst for the spread by the potentially unaware employee. Most breaches of corporate systems, either by the disgruntled employee or the unknowing employee opening that email, etc., happen internally.

Everybody simply needs to be a little more aware of the web sites they connect to, the emails they open, the programs they install, the passwords they use and how they store them, how to verify identity of sites, how to encrypt communications, etc, etc.

ntculenuff

dumb pc ? if i am using mozilla can i uninstall IE ?

sucks2beme

bobman1235 wrote: »

Look, I'm a PC guy, but anyone who thinks that Apples are "full of holes" need to do a tad bit of research. Yes, a large reason they don't get viruses is because they're not targeted, but the other large reason is that they're based on a much more secure foundation. I'd love to know where you guys get your info that it's "full of holes", aside from it being something you want to be true, or heard from someone.

http://news.zdnet.co.uk/security/0,1000000189,39291625,00.htm
My IS dept. doesn't want them on the network. Granted, this report is
from last year, but it's a fine example of perception VS. reality.

McLoki

So, if you have IE on your machine but do not use it (use firefox instead) you are ok?

zingo

bobman1235 wrote: »

If you're still using IE instead of the far superior alternatives, you deserve this.

He he he...