Serious security flaw found in IE

[ewerk 33686]

  Fop said:

In fairness an IE exploit like this comes up pretty often - what makes it even more relevant and absurd is that they still never fix it (long term - how can it still be in IE7? This sort of problem was first identified back in IE5) and that internet crime is moving to this sort of exploit in a BIG way presently. Mucho $$$$'s in it.

 

Indeed. Could it just be that IE appears to be less safe because there is more effort put into finding these weaknesses because it's the most widely used browswe?

[Fop 1]

  ewerk said:

  Fop said:

In fairness an IE exploit like this comes up pretty often - what makes it even more relevant and absurd is that they still never fix it (long term - how can it still be in IE7? This sort of problem was first identified back in IE5) and that internet crime is moving to this sort of exploit in a BIG way presently. Mucho $$$$'s in it.

 

Indeed. Could it just be that IE appears to be less safe because there is more effort put into finding these weaknesses because it's the most widely used browswe?

 

Again, nope. It's built badly (for security) and integrated differently which makes it inherently more vulnerable, what makes it worse is Microsoft tend to shush issues up rather than fixed them (IE will have as many or more vulnerabilities, just not admitted too), which lets the fraudsters operate freely for vast amounts of time.

 

Its a strange situation which sees people claiming doing the right thing security development-wise is the wrong thing.

 

 

 

 

Although this entire thread show the problem of discussing it with people that don't know what they are talking about.

[Happy Face 29]

  ewerk said:

  Fop said:

In fairness an IE exploit like this comes up pretty often - what makes it even more relevant and absurd is that they still never fix it (long term - how can it still be in IE7? This sort of problem was first identified back in IE5) and that internet crime is moving to this sort of exploit in a BIG way presently. Mucho $$$$'s in it.

 

Indeed. Could it just be that IE appears to be less safe because there is more effort put into finding these weaknesses because it's the most widely used browswe?

 

 

No, it's just shit, and Microsoft design it purposely to be shit and expose the public to as many attacks as possible.

 

Microsoft prefer to ignore these things too and leave as many people exposed as possible. They prefer their users to move than investigate a fix.

 

 

[/fop]

Edited December 16, 2008 by Happy Face

[Fop 1]

  Happy Face said:

  ewerk said:

  Fop said:

In fairness an IE exploit like this comes up pretty often - what makes it even more relevant and absurd is that they still never fix it (long term - how can it still be in IE7? This sort of problem was first identified back in IE5) and that internet crime is moving to this sort of exploit in a BIG way presently. Mucho $$$$'s in it.

 

Indeed. Could it just be that IE appears to be less safe because there is more effort put into finding these weaknesses because it's the most widely used browswe?

 

 

No, it's just shit, and Microsoft design it purposely to be shit and expose the public to as many attacks as possible.

 

Microsoft prefer to ignore these things too and leave as many people exposed as possible. They prefer their users to move than investigate a fix.

 

 

[/fop]

 

 

See yet more disinformation about things beyond your ken.

 

Your Christian Neo-Con leaning are showing right though again.

 

 

 

 

 

 

(the problem, of course, is that is it both expensive to sort these things out and in IE's case due to the way it was built and integrated it can be a real problem too sort things out at all, often impossible in a complete sense - which is just another reason why using IE is madness ).

Edited December 16, 2008 by Fop

[Fop 1]

Who'd have thought this thread would have turned into Happy Face defending the indefensible again?

[ewerk 33686]

  Happy Face said:

  ewerk said:

  Fop said:

In fairness an IE exploit like this comes up pretty often - what makes it even more relevant and absurd is that they still never fix it (long term - how can it still be in IE7? This sort of problem was first identified back in IE5) and that internet crime is moving to this sort of exploit in a BIG way presently. Mucho $$$$'s in it.

 

Indeed. Could it just be that IE appears to be less safe because there is more effort put into finding these weaknesses because it's the most widely used browswe?

 

 

No, it's just shit, and Microsoft design it purposely to be shit and expose the public to as many attacks as possible.

 

Microsoft prefer to ignore these things too and leave as many people exposed as possible. They prefer their users to move than investigate a fix.

 

 

[/fop]

 

A scarily accurate prediction of his response.

[Fop 1]

  ewerk said:

A scarily accurate prediction of his response.

 

 

 

Aye because they are both so similar.

 

  Fop said:

Again, nope. It's built badly (for security) and integrated differently which makes it inherently more vulnerable, what makes it worse is Microsoft tend to shush issues up rather than fixed them (IE will have as many or more vulnerabilities, just not admitted too), which lets the fraudsters operate freely for vast amounts of time.

 

Its a strange situation which sees people claiming doing the right thing security development-wise is the wrong thing.

  Happy Face said:

No, it's just shit, and Microsoft design it purposely to be shit and expose the public to as many attacks as possible.

 

Microsoft prefer to ignore these things too and leave as many people exposed as possible. They prefer their users to move than investigate a fix.

 

 

  Quote

Although this entire thread show the problem of discussing it with people that don't know what they are talking about.

 

Although that bit is very accurate.

[Happy Face 29]

  ewerk said:

  Happy Face said:

  ewerk said:

  Fop said:

In fairness an IE exploit like this comes up pretty often - what makes it even more relevant and absurd is that they still never fix it (long term - how can it still be in IE7? This sort of problem was first identified back in IE5) and that internet crime is moving to this sort of exploit in a BIG way presently. Mucho $$$$'s in it.

 

Indeed. Could it just be that IE appears to be less safe because there is more effort put into finding these weaknesses because it's the most widely used browswe?

 

 

No, it's just shit, and Microsoft design it purposely to be shit and expose the public to as many attacks as possible.

 

Microsoft prefer to ignore these things too and leave as many people exposed as possible. They prefer their users to move than investigate a fix.

 

 

[/fop]

 

A scarily accurate prediction of his response.

 

 

 

NEOCONS!

 

 

 

 

 

[Fop 1]

  Happy Face said:

  ewerk said:

  Happy Face said:

  ewerk said:

  Fop said:

In fairness an IE exploit like this comes up pretty often - what makes it even more relevant and absurd is that they still never fix it (long term - how can it still be in IE7? This sort of problem was first identified back in IE5) and that internet crime is moving to this sort of exploit in a BIG way presently. Mucho $$$$'s in it.

 

Indeed. Could it just be that IE appears to be less safe because there is more effort put into finding these weaknesses because it's the most widely used browswe?

 

 

No, it's just shit, and Microsoft design it purposely to be shit and expose the public to as many attacks as possible.

 

Microsoft prefer to ignore these things too and leave as many people exposed as possible. They prefer their users to move than investigate a fix.

 

 

[/fop]

 

A scarily accurate prediction of his response.

 

 

 

NEOCONS!

 

 

 

 

 

 

[Fop 1]

Better luck next time, Happy.

[Happy Face 29]

  Fop said:

Better luck next time, Happy.

 

I don't know what argument you think we had but not once have I defended Microsoft or suggested they're preferable to any other product.

 

If I wound you up, I think I did fine though my love

[Guest alex]

I reckon Ant wound him up

[Fop 1]

  Happy Face said:

  Fop said:

Better luck next time, Happy.

 

I don't know what argument you think we had but not once have I defended Microsoft or suggested they're preferable to any other product.

 

Pure semantics, implying there is no issue and it's all to do with corporate sour grapes = IE defence whether you like it or not. You can't wriggle out of that.

 

 

But do you now openly admit that the only sensible option is to NOT use any version of internet explorer? Nice to see you completely agree with me on this now.

 

 

  Quote

If I wound you up, I think I did fine though my love

You gave me another opportunity to drive you to emoticons, which is always much fun.

[Fop 1]

  alex said:

I reckon Ant wound him up

He did, that bastard.

[Happy Face 29]

  Fop said:

But do you now openly admit that the only sensible option is to NOT use any version of internet explorer? Nice to see you completely agree with me on this now.

 

Now? I've always used something different. That's the difference between you and me though. I wouldn't call someone an idiot if they chose not to. I'm not a bigot.

[Park Life 71]

Safari looks nice.

[Park Life 71]

  Ant said:

*sips some coffee from his Tux mug while reading emails from the local lug & full-disclosure*

 

I'm all about the Microsoft! Honest.... (no choice but to use it in work/gaming though, stupid c#)

 

Fop's right, Microsoft's disclosure and bug reporting policies/response times etc are a bloody shambles

 

I thought the code for these things was simple.

[Fop 1]

  Happy Face said:

  Fop said:

But do you now openly admit that the only sensible option is to NOT use any version of internet explorer? Nice to see you completely agree with me on this now.

 

Now? I've always used something different. That's the difference between you and me though. I wouldn't call someone an idiot if they chose not to.

Anyone that chooses to use IE that is actually aware of all the facts is an idiot (or an MS employee).

That you'll actively try to mislead people/muddy the water AND yet won't use the product yourself just shows the depth of your hypocrisy and core Christian Neo-Con values.

 

 

 

  Quote

I'm not a bigot.

Only on Sundays, I guess.

  Happy Face said:

I align with conservative christian beliefs on many many things.

[Fop 1]

  Ant said:

*sips some coffee from his Tux mug while reading emails from the local lug & full-disclosure*

 

I'm all about the Microsoft! Honest.... (no choice but to use it in work/gaming though, stupid c#)

 

Fop's right, Microsoft's disclosure and bug reporting policies/response times etc are a bloody shambles

 

Shh... you'll be put on Happy's shit list if you keep that up.

[Fop 1]

  Quote

The main security problem is "marketing driven product design at Microsoft, and the fact that they will not consider any given security risk a problem until it becomes a problem in the press"

 

This makes me laugh.

 

About this issue in almost 2009?

 

Nope, from 1999, which just goes to show how they'll keep doing it as long as they keep getting away with it.

[ewerk 33686]

I've said it before and I'll say it again, if you don't like it then don't use it.

 

Dunno why you're getting so wound up about it Foppy.

[Fop 1]

  ewerk said:

I've said it before and I'll say it again, if you don't like it then don't use it.

 

Dunno why you're getting so wound up about it Foppy.

 

I'm not, I'm just altruistic, nice and believe in the truth being told.

 

 

 

Although for the selfish there's very good reason to help others avoid it too, you end up paying for their carelessness in the long run as well.

[Kid Dynamite 7838]

Balls to it, someone stole my bank details before and rinsed my account and the bank had it all back 48 hours later.

[Happy Face 29]

  Quote

Firefox update

 

Mozilla has released a scheduled update for its open source Firefox web browsers for at least 10 different vulnerabilities.

 

The bugs in the browser could have been "used to run attacker code and install software, requiring no user interaction beyond normal browsing," said Mozilla.

 

It is also reissuing calls for users to upgrade from Firefox 2.0 to Firefox 3.0 as soon as possible and said it is "not planning any further security and stability updates for Firefox 2".

 

This means Mozilla will no longer support the Firefox 2 browser against future online scams and attacks.

 

http://news.bbc.co.uk/2/hi/technology/7788687.stm

 

[Guest alex]

Just shows they're more on the ball than Microsoft tbf