Slashdot Mirror
Microsoft Urges Windows Users To Shun Safari
benjymouse writes "The Register has picked up on a recent Microsoft security bulletin which urges Windows users to 'restrict use of Safari as a web browser until an appropriate update is available from Microsoft and/or Apple.' This controversy comes after Apple has officially refused to promise to do anything about the carpet bombing vulnerability in the Safari browser. Essentially, Apple does not see unsolicited downloads of hundreds or even thousands of executable files to users' desktops as being a security problem." Now while downloading a hundred files to your desktop won't automatically execute them, Microsoft's position is that a secondary attack could execute them for you.
"Please list some actual 2008 vulnerabilities that were exploited before being patched."
Uh... I'd be willing to bet that at least 50% of vulnerabilities are found by (intentionally, or unintentionally) exploiting them.
Yes most can be found by someone more knowledgeable looking over the code, but many are found by "whoops, dont do that again" or "die muther fucker die!!!"...
Just being picky... you know.. Slashdot...
And Microsoft products are insecure, provided you equate secure as having no vulnerabilities at all and insecure as the opposite. And so is nearly every other piece of (consumer) software out there.
...during periods when security bugs have been exposed in Internet Explorer. I guess the Ballmer Doctrine is that problematic Ms products must be endured while non-Ms products should be jettisoned at the first sign of problems.