Slashdot Mirror


Microsoft To Ship Emergency IE Patch

Grotendo writes "Microsoft plans to release an emergency patch for Internet Explorer very soon to counter targeted attacks and the publication of exploit code for a 'browse and you're owned' vulnerability in its flagship Web browser. The out-of-band update will be released once the company is satisfied that it has been properly tested against all affected versions of Windows. This could happen as early as this weekend." Microsoft has downplayed the seriousness of the IE zero-day, and insisted that it affects only IE6 even as security researchers close in on exploits for IE7 and IE8. Microsoft has had no comment about the firestorm that Google unleashed by directly accusing the Chinese of cyber espionage. ShadowServer has up a sobering post on the massive extent of the problem of "groups that can be referred to as the Advanced Persistent Threat."

10 of 187 comments (clear)

  1. Enough is enough! by LostCluster · · Score: 5, Informative

    I'm uploading the IE6 No More code to my website now. There's a point where users of outdated software need to be told there's four major cost-free options, including a much updated version of IE if they want to stick with IE. I'm almost thinking we should move from a warning to a service-denying error if this goes much further.

    1. Re:Enough is enough! by MrEricSir · · Score: 5, Funny

      Why not just exploit their browser's security flaws and wipe their hard drive?

      That way they learn their lesson about safe browsing the old fashioned way.

      --
      There's no -1 for "I don't get it."
    2. Re:Enough is enough! by H0p313ss · · Score: 4, Funny

      Pro

      • Amusing
      • Might solve problem

      Cons

      • Illegal
      • Immoral

      Counter proposal: have you tried carpet bombing a small third world country today?

      --
      XML is a known as a key material required to create SMD: Software of Mass Destruction
    3. Re:Enough is enough! by dgatwood · · Score: 3, Informative

      No. Chrome frame is only active if a page specifically codes for it. Otherwise, it does nothing. An attack page would not typically include code for a workaround.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    4. Re:Enough is enough! by NatasRevol · · Score: 3, Funny

      Just drop carpets!

      --
      There are two types of people in the world: Those who crave closure
  2. Countering attacks? by jhol13 · · Score: 3, Interesting

    Microsoft is not "countering the targeted attacks".

    Unless of course the German and France CERT teams recommendation to ditch IE is considered one.

  3. I have the patch details: by rehtonAesoohC · · Score: 4, Funny

    It uninstalls all versions of Internet Explorer and installs Firefox with Adblock pre-installed.

    Bravo Microsoft!

  4. Re:IE is only good at one thing... by meheler · · Score: 4, Interesting

    The sound of Windows update running is drilled into my mind forever.. Click.. click click click.. click. click.. click click click click click.
    My mind constantly asking "what the.. i haven't clicked a damned thing"

  5. The IE Patch by Bigbutt · · Score: 4, Funny

    Do you find yourself mysteriously waking up in a back alley more than once a week?

    Do you find empty HTML pages littering your desktop and you have no idea where they came from?

    Do you discover new directories on your computer?

    Get the IE Patch!

    It comes in 4 strengths so you can be gradually weaned from the habit.

    Week 1. IE 6 Patch. Internet cravings are pretty intense the first week so the IE 6 Patch is there to help you learn how to just say "NO".

    Week 2. IE 7 Patch. It's easier to avoid launching IE. You still need to check Amazon or e-Bay from time to time but the edge has been honed down a bit.

    Week 3. IE 8 Patch. You find it a lot easier to avoid clicking on the 'e' although you still lapse when you aren't thinking.

    Week 4. Firefox. You've mastered the addiction. You're free to browse the Internet worry free. Even looking at the 'e' makes you nauseous.

    Congratulations on taking the first step to breaking the IE addiction.

    [John]

    --
    Shit better not happen!
  6. So that's what it takes to get a patch out, MS? by Hurricane78 · · Score: 3, Funny

    At least two governments officially stating to avoid IE, others in fear, every single web developer on the country hating you, Google getting hacked, and every security expert on the planet laughing at you?

    Wow. Just wow.

    May I extrapolate from that, what it would take, to get a real Bugzilla for IE and make it follow recent standards?
    My guess: Inter-dimensional time war with Lovecraft’s the old ones, lead by Cthulhu, fighting the Shrike and its army, armed with gamma ray bursts and black holes, using giant stars as ammunition.

    On the other hand: That would be awesome!

    --
    Any sufficiently advanced intelligence is indistinguishable from stupidity.