Internet Explorer security alert

Internet Explorer security alert

news.bbc.co.uk

Users of the world's most common web browser have been advised to switch to another browser until a serious security flaw has been fixed

(visit the link for the full news article)


Related News Links:
news.bbc.co.uk

Just wanted to give ATS users a heads up on this. Many, many people use Internet Explorer and this is hitting version 7, so you'd be advised to switch over to Firefox or something else for a while. Don't know if this is primarily for UK users, but BBC are reporting it.
Apparently Microsoft are working on it and so hopefully shouldn't last too long.

news.bbc.co.uk
(visit the link for the full news article)

I would of switched to Firefox long ago even before this big security hole was found. The fact of the matter is active x enable browsers account for a mass amount of spyware, adware, and yes virus through this "technology". Most people don't know how to set up IE to run more secure, by default it's a wide open target for all types of nasty exploits.

For the inexperienced it would be wise to switch to a browser like Firefox because it doesn't have Active X and it has additional security features that are on which you can't turn off.

so how will Active X allow these hackers to get my passwords and such? Or is this only for those who store their passwords in IE? I'm a bit of a novice when it comes to this.

i thought the massive security flaws in IE were obvious and well known

reply to post by geek101


Active X can execute .exe files which is the easiest form to make a virus/adware/spyware. For example the most common way a person would get a virus was opening an email attachment that had a malicious file, in most cases the virus were in an .exe file. Hackers / script kiddies take advantage of novice users, active x openness, and the obvious big hole in activeX's security to exploit the unknowing to infect a computer. The security threat from this is extremely serious esp if you have sensitive information on your computer. I can't even begin to describe the implications of this but it's like having a a kick me sign on your back.

One of the most common things I see today on clients computers is this Vista Antivirus 2008 or XP Antivirus 2008 which clients receive through active x while going to various My Space websites. This program was never installed by the client but by malicious code and is a nasty piece of spyware. It is reported to include a key logger and sends what you do on the net to advertising companies! On top of that you'll receive pop ups based on which site you go to and even worst it gives you a false sense of security because it doesn't even clean one piece of existing harmful software on your computer!

So really if your concerned about your personal security please do the following:

1) Make sure you have the very latest Windows updates. (These patch known security flaws with the OS.)
2) Get some form of protection, a lot people simply don't know what there doing on there computer and need a piece of software to watch over what the programs they install or installed w/o there permission are doing. I recommend Kapersky Internet security because it protects you from all threats for the most part and isn't a resource hog like Norton.
3) Disable active x in Internet Explorer or switch to a browser like Firefox.
4) Never ever open an email your unsure of and never.....ever.....open there attachment if you don't know them. If it's ever a program that a friend has sent you, I personally never open it. Instead I get it from a trusted site like download.com which scans every piece of software that is on there site. But if you really really must make sure your virus scan checks it out first.

If you do these simple things you can reduce your security risk by leaps and bounds.


[edit on 16-12-2008 by oconnection]

Has is not become painfully obvious that Internet Explorer is by far one of the greatest threats to your internet security aside from software based firewalls?

Having spent most of my adult life working with computers, I have seen many many issues with all of Microsoft products most of which center around Internet Explorer. Changing your browser is a good start, but you cannot get rid of internet explorer or its integration into the operating system.

Updates, updates, updates.... Any IT person who remembers the NT4 Service pack 6 fiasco will tell you to be wary of updates. True, some of these updates will resolve some issues inherent to the operating system or browser, however these updates often bring in problems of their own. (are you even aware of what the update will do?)

Back in the NT4 days, we found that the safest way to apply updates was within the service packs. And, not the day they were released. By waiting about a month, we were able to determine when it was "safe" to install these updates.

Am I saying don't install these updates? No, I'm saying that you should be aware of what the update will do before applying it. How much do you truly trust Microsoft?

(for reference, 2 weeks after service pack 6 for NT server was released, Service pack 6a was released to resolve the many issues present in service pack 6. These issues rendered NT4 barely usable once service pack 6 was applied).

If you are using xp, there is an easy solution for you.

www.wubi-installer.org...

If you are using vista, you can still use wubi, but you will have to edit the boot loader yourself, so get help. What does this do for you?
1) security
2) zero viruses
3) flip off Microsoft
4) still allows you to boot into windows just to give you piece of mind that everything is still ok.
5) Automatic updates that actually fix things as they come out.

I realize that not everyone can dump Microsoft completely. Many businesses run on MS software or use windows only apps. However, if you are even a little concerned about security use a hardware based firewall (linksys, dlink smc etc) and at least have a look at wubi. You might be pleasantly surprised.
I don't work for wubi, nor an I paid any kind of compensation for blatantly pimping their free software, but as a fellow ATS-er , I think regardless of your opinion for or against my posts, you are entitled to a little security.

Thanks for reading
..Ex

reply to post by v3_exceed


There will always be issues for businesses with service packs and updates / patches this is why most companies have IT people. NT4 was more of a business OS, so I'm not sure where you going with that. My post was regarding home users using there personal computers. I'd let the IT people who are paid for that sort of thing worry about any sort of conflicts / incompatibility the client computers will have. If they know what there doing they should keep the client computers in good shape.

So yes there will be conflicts with existing software and that's why a good software company will release updates to resolve those issues. In my opinion and my experience has shown me that it's a greater risk not to update then the risk of software incompatibility esp. for the personal user.

Of course I would recommend doing research into what possible conflict a service pack or a patch might have on your existing software. But in the end that may scare people from not updating there system and thus leaving there computer open to all sorts of attacks.

I find the best security measure often times is to use common sense. If a .exe is named freegames.exe or awesomepron.exe it isn't a good idea to run such programs. That was just an example of the common sense approach. Also be aware of what processes are running on your computer. Become aware of what the normal processes are for your operating system. Process explorer is a free tool from Microsoft which is essentially a beefed up version of Task Manager.

Ultimately what it comes down is computers are very complex and as technology evolves they will become even more complex. So if you don't want to go through the heart ache educate your self and don't be left behind.



[edit on 16-12-2008 by oconnection]

reply to post by oconnection


Good Evening,
As previously stated, I don't suggest people not update their software, just to be aware of what these updates might do. I have personally seen updates that have caused systems not to boot, only to be resolved with later updates.

My problem with the method that MS provides their updates. The end user has no idea what the update may do, just that its been deemed "necessary" or "critical" which in some cases is required only due to the incompetence of Microsoft developers or staff. (See root server certificate update)

I agree that some updates are required for security purposes, linux just had a Kernal header update that was in fact critical, however this was freely disclosed and an update was presented within one day.

As long as closed source operating systems exist, the problem with what software may come in conflict with other software will continue to prevail. As many IT personnel discovered by "Updating" to IE 7 many of their clients gov't websites (at least in Canada) failed to operate. Uninstalling the upgrade would not resolve the incompatibility. The only recourse at that time was to complete a system restore to an earlier time when the IE update had not been run. Of course there was no mention of this on Microsoft's website at the time.

Very often, I will hear or read, that the cure all for computer security is to "Live update" your system, without regard to the potential harm caused by these updates. (Anyone remember an IE4 bug that suddenly materialized in IE6 after a live update?)

So in closing, please let me agree with you. Updating your system with security or functional patches is essential to good computer use, however the end user must take some responsibility with understanding what these updates will do.

I also agree that the end user needs to take responsibility with understanding the processes running on their machine (to a point) and be conscious of processes that seem to use unreasonable amount of resources. Clicking on every .exe file you find in a .zip is also a very bad idea.
If you don't know where it came from don't use it.
(I have personally cleaned that antivirus xp crap off of some machines due to infections, and drive by downloads, so I know where your coming from with that one)


Thanks for reading
..Ex

I would advise everyone to switch to Firefox permanently. They don't ever have these serious security problems, because it has been developed by a huge collaboration of programmers.

reply to post by v3_exceed


starred your posts. Always find out what updates to drivers and such do. Sometimes the updates can really mess with your computer. My most recent issue was a video card driver install/update. Caused a whole load of issues for me.

Basically, hes spot on. Learn what the updates do, learn why they are doing it, etc. etc. Being informed is the TRUE best measure against having your computer fall prey to malicious intent/failures.

Thank you for the heads up! I used to use Firefox all the time, and then something happened with computer and went back to IE for about three days.
Just installed Mozilla again!

reply to post by Yoda411


Yup, that's what I did. I don't think I could ever go back to MS IE.

I've been using Mozilla based browsers for quite some time now. First thing I've done for as long as I can remember with new computers was to disable internet explorer from connecting to a network, even if another program requests it, IE will never connect to a network on a PC I've built or own.

Personally, the only reason I ever use windows is if I've got a windows based game I want to play. Other than that... Ubuntu Linux.

Why worry about viruses when you use Linux?

I can go where I please and open what I want on Linux... I don't have to worry.

Of course, I'm cautious as to what I compile, but that's a different story.

[edit on 16-12-2008 by johnsky]

Opera is better than Firefox. You should be switching to Opera, not Firefox! It's always "Firefox this, Firefox that"! Firefox blows fonts and text out of proportion when using page zoom. Opera renders all pages properly to scale, it's the only browser that does.

Originally posted by RiotComing
Opera is better than Firefox. You should be switching to Opera, not Firefox! It's always "Firefox this, Firefox that"! Firefox blows fonts and text out of proportion when using page zoom. Opera renders all pages properly to scale, it's the only browser that does.

Yeah, I couldn't figure out why the fonts and text didn't look the same with Firefox. I am 'picky' about the way things look on the computer screen and will even try this 'Opera' to make things appear better. Sheesh.

reply to post by geek101


Internet Exploder? Really? My cat knows that. People that use Exploder just do not know. Yes, ignorance. And if you are happy with it it means bliss...as in ignorance being bliss ("you" being second person).

This snarky-comment brought to you by Mozilla International.

This is front page new on yahoo.com and many other sites, www.firefox.com

reply to post by geek101


I agree with you! Firefox is the best choice when you want the most secure browser. Those who suggest safari is the best because it has a better zoom feature must have sent their brains on safari. They have completely missed the point! Surprising no?

Originally posted by RiotComing
Opera is better than Firefox. You should be switching to Opera, not Firefox! It's always "Firefox this, Firefox that"! Firefox blows fonts and text out of proportion when using page zoom. Opera renders all pages properly to scale, it's the only browser that does.

Yeah, but Opera isn't (last I looked), Free Software, and for that reason alone, I don't use it.

Also, I haven't really noticed any issues with Firefox's text/zoom ability. But then I never really need to zoom in on text, so...

Anyway, If I really want to zoom in on something when I'm in Ubuntu, I can just do exactly that with Compiz anyway, which will magnify anything centered on the mouse.