Slashdot Mirror
Corporate Servers Spreading IE Virus [Updated]
uncadonna writes "ZDNet is reporting that corporate web servers are infecting visitors' PCs. The combination of two unpatched IE security holes and hacked corporate websites is apparently distributing malware via
several high-credibility sites. ZDNet says users have 'few options' other than alternative browsers or platforms." Update: 06/25 14:50 GMT by J : A reader points out Microsoft's What You Should Know page. Here's the short version for avoiding this Critical severity attack: you must install add-on software, and change multiple settings in multiple programs, thus causing "some Web sites to work improperly." By changing more settings, you can regain functionality for a particular site if "you trust that it is safe to use," which you have no way of knowing. Or try Firefox. Update: 06/25 19:30 GMT by J : Reuters reports the attack installs a keysniffer which can steal credit card numbers, passwords, and so on. The story offers safety tips, but fails to mention that, after patching the hole, many users will be infected without their knowledge. Shouldn't the "fix" include ceasing to type anything important into your computer until you purchase software which can detect and remove the Trojan? And will you be downloading that software with Mastercard or Visa?
http://www.mozilla.org
It has just been brought to our attention at the root of the problem this site
flinging poop since 1969
The site which is actually sending the infected file seems to have been slashdotted. Is this the next wave of antivirus technology?
Karma: Segmentation fault (tried to dereference a null post)
I have thought for years that Ziff-Davis were Microsoft Shills. [I don't mean all MS software is bad, I just mean Ziff-Davis seemed impervious to facts in their reviews]
If ZDNet is saying to stop using IE things must be bad.
I have tried to depart from IE 2 or 3 times but failed. As soon as I type this message I make the move for good. Hello Mozilla.
Sam
blog.sam.liddicott.com
...is if they infect the Windows Update servers. You go there to fix the vulnerabilities in IE and *BAM* you're infected with the same vulnerabilities you're trying to fix.
"I swear, I never go to those sites, only the major ones."
Hmmm.
I can't help but chuckle every time these come out because all I hear in my head is the line,"All viruses are created after the exploit has been announced."
Keep those 0-day exploits coming, boys.
+++ATHZ 99:5:80
as I quiety tap the nails of the coffin.
-
Surely it has got to be:
"FireBillGates"
And while they're recovering from your assault the top-notch assistive technologies in the latest GNOME releases would allow them to continue to get work done. Another Linux convert!
Maybe getting the Linux revolution in full swing requires geeks to start beating people mercilessly for their own good. What Microsoft can do with billions of marketing dollars, we can do with a board with a nail in it.
(Most of us are rather weak, so I recommend teaming up 3-4 geeks per regular person you're trying to... um... educate.)
Game... blouses.
that the page for reading the responses included a large banner ad for Microsoft that claimed they take your security seriously and saying, "visit microsoft.com/it/security/IT today.
No one ever had to evacuate a city because the solar panels broke!
Microsoft just isn't ready for the Enterprise. Perhaps in a few years. Plus there all those nasty rumours about stealing the TCP/IP stack from BSD.
The nerds will rebuild, and will be filthy rich. Women will throw themselves at us.
This implies that all nerds are men. Or lesbians.
Wow, another Opera user, that's two this year alone. I guess it's ddefinitely and "up and comer" and "one to watch"!
Oh yeah right. Like my friends and family don't think I'm *enough* of a loser.
Now I'm supposed to sit down with them for a "face-to-face" about two browsers which are *identical* from their point of view?
"Susan, come here for a minute."
"Why? I've got to go in 10 minutes, I'm really busy."
"No this is really important."
"Oh okay"
"I wanted to show this web browser"
"Yeah, explorer, so what?"
"No!!! This is FIREFOX!! AN ADVANCED OPEN-SOURCE WEB BROWSER!! MUCH MORE SECURE!!!"
"It looks like explorer to me."
"Well, it LOOKS like explorer but it's better. Look here, this is etrade.com, it looks just like explorer right? open source rules!"
"Uhh, yeah, it looks exactly the same to me. Well don't mess up my computer I have to go."
"WAIT!!! If there had been a virus there on etrade.com you WOULDN'T HAVE GOTTEN IT!! ISN'T THAT AWESOME!!!!!!!!"
"You are such a loser."