Microsoft Patches Fix IE, Sony Flaws

An anonymous reader writes "Microsoft issued two security updates today, one of which fixes at least four flaws in its Internet Explorer browser, including one for which an exploit was released over Thanksgiving that is now being used by a handful of porn sites to install spyware, etc. According to Washingtonpost.com, the IE patch also removes a component left behind by a patch from Sony BMG designed to remove some of the more dangerous features of anti-piracy software installed by Sony BMG music CDs. Researchers found that the Sony patch changed settings in IE so that any Web site could install software on those machines."

Comments

The Good, The Bad, and The Stupid

[Anonymous Coward]

If Microsoft released a patch right away, administrators would complain they are patching too often and forcing them to test internal software more.

If Microsoft waits for the patch cycle, slashdotters complain Microsoft is purposely holding out so that they can sell anti-virus

And normal computer users, they don't patch so it really does matter

Re:The Good, The Bad, and The Stupid

[oGMo]

If Microsoft released a patch right away, administrators would complain they are patching too often and forcing them to test internal software more.

If Microsoft released patches right away and didn't have a history of patches that broke everything and introduced more holes... people would complain less.

Re:The Good, The Bad, and The Stupid

[VGR]

Gosh, it's almost as if the real complaint of administrators and slashdotters is that Microsoft is putting out a lot of badly written software.

Perhaps a corollary of the complaint is that Microsoft seems to have enough money that they could afford some QA on their code. Considering their exploits result in crippling the economy, a little responsibility doesn't seem like a lot to ask.

No one can write software that's 100% bug free, but they could get a lot closer to 100% than this.

Re:This is bizarre

[Eberlin]

HD-DVD vs. Blu-Ray, Xbox 360 vs. PS3, and then there's Microsoft's move into the music business. Must say there's not many things more satisfying than pointing out (and fixing) the wrongdoings of the "competition" -- ain't that right, fellow slashbots?

it's just an anti sony move

[patcito]

This is just a good occasion for MS to say "hey look how Sony software suck so much we need to clean the mess for them".
After the HD DVD delay and the xbox failure in Japan, MS needed to do some anti sony PR to make it up in their little war against Sony.

Re:This is bizarre

[Trogre]

Of course Microsoft wants to appear as the Knight in Shining Armour who saved us from the Evil Sony.

Who has just invested millions in the launch of a games console, and who is the current leader in that arena?

Blu Ray

[jmichaelg]

Will people remember this farce and say thanks but no thanks to Blu-Ray because they're not sure what the drivers will do to their computer? And if you can't trust Sony's Blu-Ray drivers, who's to say the HD-DVD drivers will be any safer?

It would be ironic if somebody at Sony who was worried about selling a few copies of a country-western CD ended up jeopardizing a billion dollar market.

Re:Thanks Sony for making my system vulnerable

[drinkypoo]

I'm quite certain that they did QA and the software passed with flying colors. It's all in how you write your requirements...