Slashdot Mirror
IE Patch To Fix 57 Vulnerabilities
Billly Gates writes "Microsoft is advising users to stick with other browsers until Tuesday, when 57 patches for Internet Explorer 6, 7, 8, 9, and even 10 are scheduled. There is no word if this patch is to protect IE from the 50+ Java exploits that were patched last week or the new Adobe Flash vulnerabilities. Microsoft has more information here. In semi-related news, IE 10 is almost done for Windows 7 and has a IE10 blocker available for corporations. No word on whether IE 10 will be included as part of the 57 updates."
IE10 bundles Flash, so I guess the flash bugfixes can be related.
But IE does not bundle Java - why would the IE bugfixes be related to the Java bugfixes?
"Microsoft is advising users to stick with other browsers until Tuesday"
Ok everybody! go and install Firefox or Chrome!
browsers. Where did you got this information? MS bulletin does not state that and I doubt MS would ever make such recommendation no matter how serious the bug was.
The fact that IE6 is being patched means someone dropped a NS bomb on them (National Security) which is a sure fire way to motivate companies to keep their software secure. I know it's not the favorite company here, but they fought (sometimes dirty) to get where they are. They made it and have to deal with the "now what?" phase. Software monocultures suck no matter who's culture it is.
What I found really interesting is that bulletins 7-9 and 11 are for escalation of privilege whereas the rest are for remote code execution. Which means, it may not have helped much to be logged in as an unprivileged user anyway.
If computers were people, I'd be a misanthrope.
...57 patches for Internet Explorer 6, 7, 8, 9, and even 10 are scheduled.
and
No word on whether IE 10 will be included as part of the 57 updates.
Did you even read what you wrote?
The submitter got it by misreading the ZDnet article. It was the author of that article (Zack Whittaker) who made the recommendation, not MS.
They are 12 vulnerabilities and 57 patches across all their operating systems. 2 are critical.
"The submitter got it by misreading the ZDnet article. It was the author of that article (Zack Whittaker) who made the recommendation, not MS."
Just as well timothy picked it up in editing. Oh, wait...
Not being able to actually uninstall your POS
Even Microsoft admits that its software is a POS.
But seriously, I've rescued several failed Windows PCs by replacing the OS with Ubuntu. Retraining casual users from Windows to Xubuntu isn't as hard as some people claim.
"excites their target audience into high levels of self-congratulatory mental masturbation?"
Mental? Why would you throw such an extraneous word into that statement?
'Scuse me, I gotta get strokin'!
"Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
"excites their target audience into high levels of self-congratulatory mental masturbation?"
Mental? Why would you throw such an extraneous word into that statement?
'Scuse me, I gotta get strokin'!
Well, I'm assuming its hard to franticly reply on Slashdot in one window, and surf 4chan in another, with one hand occupied.
You can't exactly "uninstall" the browser, but you can remove it from the installation media, thereby preventing it's installation. But, you knew that, right?
http://www.nliteos.com/
It's been years since I used this, but it worked great back then!
"Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
First Oracle releases patches for 50 Java vulnerabilities, now Microsoft does better with 57 for IE. Who will be the first to go over 60 in the competition?
In any case, it seems we are doomed as far as security on the Internet goes. Kinda depressing.
Why is this down voted?!? as a web developer I wish IE 6 would disappear into a deep dark recess and never come out! For the site I develop we stopped supporting it ages ago and instead post a banner that basically says "HEY! STOP IT! Upgrade or get a different browser you ninnys" ... something like that if I remember right.
Do not tempt Rule 34.
Inheritance is the sincerest form of nepotism.
Why is this down voted?!? as a web developer I wish IE 6 would disappear into a deep dark recess and never come out! For the site I develop we stopped supporting it ages ago and instead post a banner that basically says "HEY! STOP IT! Upgrade or get a different browser you ninnys" ... something like that if I remember right.
It pretty much has. Not even microsoft's website works properly in it anymore and if MS abandons it you can consider it effectively dead for all but specialized internal apps.
With VMWare and Citrix as well as WIndows Server 2003 you can virtualize and run your crappy app inside a modern browser. There is no good business case to use it on a desktop anymore as it is in the realms of legacy x3270 terminal programs now. May it RIP.
That is why it is modded down.The last place I seen it used was in 2011 on a desktop. IE 8 on the otherhand will be the next big challenge as corps use only that version because it is a stopover between XP and WIndows 7 and yuo can prey IE 8 off their cold dead heands.
http://saveie6.com/
so it still performs just as well as when it was released?
What if they need to use Office, play some random game, use a new piece of hardware
Such a user can buy a copy of Windows to replace the copy on the restore disc or restore partition that he admits having lost. When deciding whether to install Windows or Xubuntu for a family member, I make sure to ask what applications the user most commonly uses, and then I weigh that against whether or not the user has the install media and certificate of authenticity for a supported Windows operating system handy. And by "supported" I mean both whether or not the operating system is compatible with the hardware and how long until the announced end of life. For example, I'd consider Windows XP unsupported because security updates will end in 14 months.
or if the system upgrade leaves the computer in an unbootable state
How is this less likely to happen in an upgrade from Windows XP to Windows Vista, from Windows Vista to Windows 7, or from Windows 7 to Windows 8, than in an upgrade from (say) Ubuntu 10.04 to Ubuntu 12.04?
You are wrong Osgeld. You need to see IE in action.
http://saveie6.com/
At least, I assume that is the prevailing attitude on Slashdot these days? Let's see:
IE Patch to Fix 57 Vulnerabilities .NET Framework. There are not 57 vulnerabilities exclusively in Internet Explorer as the title suggests. We can likely further expect certain vulnerabilities to only be applicable to certain versions of Internet Explorer once the full details are available.
No, as per the linked Security Bulletin Advance Notification a total of 57 vulnerabilities are being fixed across Windows, Internet Explorer, Office & the
Microsoft is advising users to stick with other browsers until Tuesday
Source?
No, as noted above, the vulnerabilities are across a variety of products. Further, 13 "patches" (aka. updates or bulletins if you prefer) are being released as multiple vulnerabilities are often patched in a single update. As per the linked bulletin, there are two bulletin's being released for Internet Explorer, which would typically result in two updates for Internet Explorer for a given Windows installation. Of course, there'll be many different updates released for different versions of IE and architectures (ie. 32-bit/64-bit/etc...) but a given Windows installation shouldn't have more than two applicable to it.
No word on whether IE 10 will be included as part of the 57 updates.
Apart from the explicit reference to Internet Explorer 10 being affected by at least some of these vulnerabilities in the linked MS Advance Notification? Have you tried reading the very articles you post? I'm reliably informed it helps comprehension.
Are the editors trying to set a new record for inaccuracies within a small paragraph of text?
Patches, you say? What about SP2 for Win 7? Other than making us move to Win 8, is there a good reason why I should have to d/l 250+ MB on a clean install? A roll up for .NET 4 would be in order as well...
"...Well, there's egg and bacon; egg sausage and bacon; egg and spam; egg bacon and spam; egg bacon sausage and spam..."
"Microsoft is advising users to stick with other browsers until Tuesday"
I see.
none
57 Varieties - of vulnerability!
Your ad here.
All of which is absolutely useless if you consider that the most common use case for LTS is for servers, and "wipe and reinstall" means a lot more downtime than would be necessary if the upgrade process wasn't utterly braindead.