youneverknow Posted June 30, 2004 Posted June 30, 2004 Malicious Web sites can use the flaw to spoof content from a trusted Web site. By George V. Hulme Internet security research group Secunia issued a warning Wednesday about a security vulnerability it says it has discovered within Microsoft's Internet Explorer Web browser. The flaw, which Secunia has ranked as "moderately critical," is found within Internet Explorer versions 5.01, 5.5, and 6, Secunia says in an advisory. Internet Explorer doesn't block malicious Web sites from inserting "arbitrary content" in an arbitrary frame in a browser window, the Danish security firm says. Secunia says the malicious content will appear as if it originated from a trusted site, which is an attack commonly known as spoofing. Secunia says it has verified the flaw in "a fully patched Internet Explorer 6 running on Microsoft Windows XP" and that other versions of Internet Explorer could also be affected by this vulnerability. Secunia's only advice is that Internet Explorer users not visit untrusted Web sites or select a different browser. Microsoft was not immediately available for comment. Youneverknow's personal comment... I urge people to seriously consider running some other browser...Mozilla,Firefox or Opera are all better than MS IE. youneverknow Quote
borfast Posted July 1, 2004 Posted July 1, 2004 Eheheheh One more for the list... I second that request. People should really switch to a decent browser and stop using IE. I mean, why do people insist on using a browser that is outdated, has lots of security holes, some of them known for months and still unpatched, and will only be updated in 2006? Quote
TCH-Rob Posted July 1, 2004 Posted July 1, 2004 Raul, Tell that to my mom or the people down the road that got their Dell or Gateway and had to call to find out that you have to plug the phone cord into the wall to connect to the Internet. Why do so many people use it? Because it is bundled with the most popular OS on the planet. They don't have to install anything, just click the "Big Blue E". They only want Internet and email access so they can find "cool" websites and send them along with all of those "you must send this to 10 friends" emails they get with the past hundred people copied still in the message. People don't want to learn to install another browser and learn to use another program all over again even if you tell them it works exactly like the one they are using does. In reality, people don't want to learn at all, just relax on the Internet getting programs with spyware. Do I really want it to change? Not so much, my pockets get lined with their money. Quote
tattoovampire Posted July 1, 2004 Posted July 1, 2004 Eheheheh One more for the list... I second that request. People should really switch to a decent browser and stop using IE. I mean, why do people insist on using a browser that is outdated, has lots of security holes, some of them known for months and still unpatched, and will only be updated in 2006? Because the average PC user has been so dumbed down by Microsoft Windows. That's not meant as a slam. Anyone who's been around home PCs since the days of DOS can remember back then when you actually had to *know* a little to accomplish some things. We didn't have wizards to install software and hardware or to help us troubleshoot problem PCs. MS revolutionized the home computing world but in the process created a world full of people who have no idea of the inherent dangers in a machine connected to the Internet, or if they do have no idea how to help themselves. Most average users I know are absolutely scared to death they'll "break something" if they attempt to install software or troubleshoot their machine on their own. I don't mind because I make plenty of pocket money doing the most basic maintenance for people. The sad thing is, when I try to instruct them as to how to perform certain chores themselves, they don't want to learn. Quote
borfast Posted July 1, 2004 Posted July 1, 2004 (edited) Yes, I agree with both of you. Especially with Rob, when you say that you don't care much because that way your pockets get lined with their money. 100% agreed! Vampire, the problem with the "world" MS created is not just that. The real problem is that people have no idea of what a computer is or how it works. I bet that if you ask anyone who's been a Windows user ever since he got a computer "what is a directory" they'll either answer "a directory? I don't know, I just know what a 'folder' is" or "a directory? yes, I know what it is, it's those little yellow icons where I put my stuff". Not the best example but I think you get my point. And then there are those that are even worst - those who end up learning a little bit (like clicking buttons, plugging the phone cord so they can get internet access, using keyboard shortcuts - people are completely amazed at my l33t sk1lz when I use ALT+F4 to close a window or ALT+TAB to switch between open windows) but when you tell them they're doing something wrong or that they should use another software because the one they use is full of problems, they just say "I don't want to know! I don't want to touch this because I'm affraid that if I press ALT+F4 instead of the top-right corner X, this will crumble down like if it was a match-stick tower!". Just like you said, if you try to instruct them, they don't want to learn - those are the ones that really irritate me. But hey, if they want to keep paying me to do something they could do in 5 or 10 minutes, go right ahead! Edited July 1, 2004 by TCH-Raul Quote
stevevan Posted July 4, 2004 Posted July 4, 2004 This even made cnn.com. (CNN.com story) I've now removed IE and using nothing but Firefox and soon I'll be dispensing with Micro$oft totally. Thumbs Up Getting a little tired of contantly "updating"! Microsoft Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.