Slashdot Mirror
German Government Advises Public To Stop Using IE
An anonymous reader writes "After McAfee's disclosure of an IE 0-day vulnerability this week that had been used in Operation Aurora, the hack and stealing of data from Google, Adobe and about 3 dozen other major companies, the German government has advised the public to switch to alternative browsers (untranslated statement). Given that the exploit has now been made public and the patch from Microsoft is still nowhere to be seen, how long will it be before other governments follow suit?"
It could happen to any browser to have the same security flaw in 3 different versions DESPITE claimed complete rewrites of the code.
MS apologists, you got to admire their dedication. The Iraqi minister of information used windows as well.
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
Why be fair to Microsoft in this case? Bashing where bashing is due;
IE is a highly dangerous lump of toxic/radioactive waste, with a half life of over 20 years.
Microsoft did everything wrong. Wrote the piece of shit in the first place. Tightly integrated it into windows, for leveraging purposes. Didn't even try to keep on top of updates letting it stagnate.
It will have a damaging effect on the web, web standards, and general computing, long after Microsoft drops support for any given version.
It's a German federal agency, not the German government. And they warn users about IE every time there is a major unpatched security hole.
http://www.theregister.co.uk/2010/01/14/cyber_assault_followup/
"Wrote the piece of shit in the first place"
No, they bought/stole the Microsoft way from Spyglass.
http://en.wikipedia.org/wiki/Spyglass,_Inc.
(the link ends with a dot slashdot moves it after "[wikipedia.org]". bug! )
You may be correct, I can't say since I haven't used Windoze for anything to do with the internet in a long time. I do wonder though, why don't they just patch the damn thing? I mean really. They know a lot of people are getting infected, don't they give a shit? Ah...my bad. This is Micro$oft we're talking about here.
Firefox gives you the option of disabling plugins without uninstalling them (as does IE8, those are the only 2 browsers I have installed).
Adobe Reader also gives you the option of not loading pdfs in the browser (the browser simply prompts you to save the file).
Nerd rage is the funniest rage.
The "Bundesamt für Sicherheit in der Informationstechnik" (BSI), engl. Federal Bureau for Security in Information Technology, is not a governmental, but a state institution. It is not strictly driven by the government. And it is controlled by the parliament. Even though it works in the domain of the ministry of the interior. So no minister was involved in the "do not use IE" speech.
BTW: IE has not the biggest market share in Germany.
Maybe the summary shouldn't have let out the most important word: temporary. Here a translation of the headlines:
original:
Kritische Sicherheitslücke im Internet Explorer
BSI empfiehlt die vorübergehende Nutzung alternativer Browser
translation:
Critical securiy hole in Internet Explorer
BSI recommends to temporarily use alternative browsers
JFGI
http://www.frontmotion.com/Firefox/
The problem at least as far as PDF readers go, is that most users don't realise PDF is a standard and that there are multiple implementations... They think Adobe make the only pdf reader available.
I would never install acrobat reader, the default pdf readers in macos and linux work much better, far less bloated, and there are plenty of alternatives available for other platforms too.
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
This happened to a friend of mine. His system was totally hijacked. Couldn't run any .exe.
I finally got into the registry and disabled the malware, and things were seemingly back to normal. But we re-imaged the machine and restored his backed-up data. It was a pain, but it didn't take that long.
But it was a similar thing, I think. Firefox crashing - go try IE, and bang.
Mozilla is working on an MSI package. There's a bug in bugzilla for that. Vote for it and/or help with coding testing.
You're funny.
Bug 52052 was opened in 2000.
Bug 231062 was opened in 2004 when 52052 was closed with "WONTFIX"
Sure, there's been recent activity, but it's been TEN years. Until MSI becomes a blocker for 3.6 or 3.7, they'll drop it for the new shiny like they've always done.
Mozilla Firefox 3.5.x: unpatched 0 of 6 Secunia advisories.
MS Internet Explorer 8.x: unpatched 4 of 8 Secunia advisories.
MS Internet Explorer 7.x: unpatched 11 of 42 Secunia advisories.
Opera 10.x: unpatched 0 of 3 Secunia advisories.
I can't see your point, are you trolling?