Slashdot Mirror
Zero-Day IE Exploit Takes Control of PCs
anethema writes "A remote IE exploit with implementations is currently in the wild. From the article: 'Exploit code for a critical flaw in fully patched versions of Microsoft Corp.'s Internet Explorer browser has been released on the Internet, putting millions of Web surfers at risk of computer hijack attacks.' Aparently all you have to do is browse the page to be affected. There is no patch, but since it is a JavaScript exploit, you can work around it by disabling JavaScript."
I use Firefox.
Remember when web browsers were just for viewing HTML pages, and not as a platform agnostic instant-rollout applications platform?
Yeah, me neither.
/evil on
/evil off
That'd be SO funny
Someday, an IE exploit is going to come along that wipes your HD. Then we'll see sparks fly.
WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
Take Preinstalled Browser,
Add to Lazy User,
and mix in a healthy dose of Ignorance.
Alternate Receipe:
Take Preinstalled Browser,
Add Fear Of Change.
Despite having Firefox installed at home, my wife insists on MSExploder .... I think the linux migration time-table is getting shortened.
If you think imaginary property and real property are the same, when does your house become public domain?
Now, mod me whatever you want, but the info you provide should be FACTS.
Fact: A critical security flaw has been found in IE, and the SANS ISC is recommending that people use one of the "other browsers".
Howzat?
The opinion above is fiction. Any similarity to real opinions, including facts and logic, is purely coincidental.
So you'd deliberately and maliciously cause problems, just to prove you were on some imaginary moral high ground?
users do, but they're much further down the food chain
Except that regular users comprimise a greater number of Internet users. So if Joe Average uses IE, more people are going to be affected by this flaw.
we'll get the usual set of arguments about browser and OS supremacy.
If something has fewer security problems, isn't it "superior" in that respect?
If you can't trust Lynx to be secure, then really nothing is secure.
Right. Because if something has one flaw, then you might as well not even bother trying, because everything has flaws. I mean, just because IE has had double-or-triple-digit flaws, clearly this one flaw in lynx makes all arguments against IE moot.
What an inane comment.
but for the life of me I can't understand why.
It's very, very simple. People are stupid and lazy.
--- witty signature
So? When 90% of your "customers" are being told that they either turn off Javascript or get a virus, it doesn't matter whether the problem is with Javascript or IE - either way, there is no return for adding AJAX features to a web site. I'd rather spend my precious development resources on non-AJAX features that benefit everybody.
The next Cmdr Taco duplicate will be ready soon, but subscribers can beat the rush and see it early!
Despite having Firefox installed at home, my wife insists on MSExploder
I don't understand this. You aren't the first person to tell me their Wife doesn't wanna run Firefox. You know what I did. I said to my wife "Wife. IE will break the computer and then I will have to spend all night fixing it rather than doing whatever else it is you wanted me to do.". My wife actually respects that I know what the crap I am talking about (just as I respect what the crap she is talking about in her area of expertice...which isn't IT) and goes with what I say.
Why don't you people just try explaining the problems to your wife and get over it?
Unstable Apps: Our Android Apps Don't Suck
Fact: this bug was reported six months ago, but it is only now that someone has publicly shown how to use it to run arbitrary code.
Who knows how long other people have been exploiting this bug - potentially in ways not involving Javascript as well?