babble home
rabble.ca - news for the rest of us
today's active topics


Post New Topic  Post A Reply
FAQ | Forum Home
  next oldest topic   next newest topic
» babble   » walking the talk   » labour and consumption   » IE has flaw of doom

Email this thread to someone!    
Author Topic: IE has flaw of doom
Cougyr
rabble-rouser
Babbler # 3336

posted 22 November 2005 12:43 PM      Profile for Cougyr     Send New Private Message      Edit/Delete Post  Reply With Quote 
quote:
A UK group of hackers has published a zero-day exploit which puts means IE users only have to visit a site to be attacked.
here.

And the beat goes on . . .


From: over the mountain | Registered: Nov 2002  |  IP: Logged
Albireo
rabble-rouser
Babbler # 3052

posted 22 November 2005 12:47 PM      Profile for Albireo     Send New Private Message      Edit/Delete Post  Reply With Quote 
With the way you framed your post, I wonder how many IE users are going to click on that link of yours.
From: --> . <-- | Registered: Sep 2002  |  IP: Logged
Cougyr
rabble-rouser
Babbler # 3336

posted 22 November 2005 12:59 PM      Profile for Cougyr     Send New Private Message      Edit/Delete Post  Reply With Quote 
You're fast, Albireo. I never thought of that. (I couldn't remember the name of the news site. :rolleyes
From: over the mountain | Registered: Nov 2002  |  IP: Logged
Maritimesea
rabble-rouser
Babbler # 8953

posted 22 November 2005 02:38 PM      Profile for Maritimesea     Send New Private Message      Edit/Delete Post  Reply With Quote 
Stopped using IE quite some time ago and have it locked up tighter than a drum, but it'll be interesting to see if it creates as much havoc as the article predicts.
From: Nova Scotia | Registered: Apr 2005  |  IP: Logged
No Yards
rabble-rouser
Babbler # 4169

posted 22 November 2005 03:14 PM      Profile for No Yards   Author's Homepage     Send New Private Message      Edit/Delete Post  Reply With Quote 
I tried it ... my virus checker caught the exploit when I tried to save the html to my local drive ... when I opened the html on explorer, it gave me a java script error.

I haven't looked at the code, but as I recall this kind of "exploit" (using a web psge to run a local application) was once a "feature".


From: Defending traditional marriage since June 28, 2005 | Registered: Jun 2003  |  IP: Logged
Cougyr
rabble-rouser
Babbler # 3336

posted 22 November 2005 04:25 PM      Profile for Cougyr     Send New Private Message      Edit/Delete Post  Reply With Quote 
quote:
Originally posted by No Yards:
. . . as I recall this kind of "exploit" (using a web psge to run a local application) was once a "feature".

That could be an asset if everyone was honest and all users were competant to know what they were doing. In a closed intranet that feature could be productive. In the chaos of the Internet, it's very risky. It is too bad that Microsoft can't tell the difference. Too much of Windows seems to have been designed around closed systems which aren't exposed to the Web.


From: over the mountain | Registered: Nov 2002  |  IP: Logged
maestro
rabble-rouser
Babbler # 7842

posted 22 November 2005 07:48 PM      Profile for maestro     Send New Private Message      Edit/Delete Post  Reply With Quote 
quote:
Too much of Windows seems to have been designed around closed systems which aren't exposed to the Web.

I think this is really a problem of the web, not Windows.

The internet was designed to be operated in the closed environment of military communications. As such, I don't think anyone imagined what it would become. Perhaps if they had imagined it, they would have taken steps to design some security into the overall protocol.

They didn't, and we're stuck with it. The only security that exists is that lesser used programs don't attract the attention of hackers. They'd much rather play where they have more effect.

I've often wondered at how we've allowed such a leaky vessel (the internet) to take such an important role in all facets of the industrial society.

I've also often wondered whether the lasts big blackout was caused by a hacker. I admit it's not likely, but it is certainly possible, which leads me to wonder what other systems are vulnerable to hacking.


From: Vancouver | Registered: Jan 2005  |  IP: Logged
Cougyr
rabble-rouser
Babbler # 3336

posted 22 November 2005 08:44 PM      Profile for Cougyr     Send New Private Message      Edit/Delete Post  Reply With Quote 
quote:
Originally posted by maestro:
I think this is really a problem of the web, not Windows.

The internet was designed to be operated in the closed environment of military communications. As such, I don't think anyone imagined what it would become. Perhaps if they had imagined it, they would have taken steps to design some security into the overall protocol.


Yes, the Net has become much more than originally envisioned. But, the problem is still with Windows.


From: over the mountain | Registered: Nov 2002  |  IP: Logged
No Yards
rabble-rouser
Babbler # 4169

posted 22 November 2005 09:00 PM      Profile for No Yards   Author's Homepage     Send New Private Message      Edit/Delete Post  Reply With Quote 
quote:
Originally posted by maestro:

I think this is really a problem of the web, not Windows.


Issues with connection hijacking, spying on communications, denial of service attacks might be an Internet issue, but viruses, spyware, trojans, remote control, type issues are all OS and applications problems ... the Internet is just the delivery system, just as the floppy disk was the main delivery system in the early 90's . . . the Internet made the delivery more efficient, and admittedly the Internet does have a few security issues of its own, but the vast majority of the security issues have nothing directly to do with the Internet, and just as easily could be accomplished using floppy disks, CDs, or DVDs.


From: Defending traditional marriage since June 28, 2005 | Registered: Jun 2003  |  IP: Logged
radiorahim
rabble-rouser
Babbler # 2777

posted 22 November 2005 11:08 PM      Profile for radiorahim     Send New Private Message      Edit/Delete Post  Reply With Quote 
quote:
They didn't, and we're stuck with it. The only security that exists is that lesser used programs don't attract the attention of hackers. They'd much rather play where they have more effect.

Well then look at open source Apache Server vs. Microsoft IIS. The figure I hear thrown around is that about +/- 70% of the world's web servers run Apache...usually on Unix or Linux, but Apache can be run on Windows as well.

Microsoft IIS has +/- 20% of the world's web servers...and it only runs on Windows Servers.

So when it comes to serving up web pages, Microsoft isn't the dominant player...open source is.

Yet IIS has had alot more vulnerabilities of the "severe" type than Apache has.

I understand that IIS 6.0 has gotten alot better than IIS 5.0. However IIS 5.0 is much more commonly deployed at this point than IIS 6.0...and IIS 6.0 only runs on Windows Server 2003...requiring a costly upgrade by organizations. Apache on the other hand is free.

So I don't buy the argument that hackers don't go after open source software because few folks are using it.

MS takes the approach of complete system integration so that they can lock you into their system...and then they can extract cash from you for licensing fees.

The open source approach is more modular...if you break one thing, you haven't necessarily broken everything...and there are no licensing fees to worry about if you want to deploy another computer.

Anyway, MS is finally starting to have to compete in the marketplace. Isn't that what the capitalists are always telling us that capitalism is about? The desktop computer is the thing that MS has a stranglehold on...but I think they're on a downward slide there too.


From: a Micro$oft-free computer | Registered: Jun 2002  |  IP: Logged

All times are Pacific Time  

Post New Topic  Post A Reply Close Topic    Move Topic    Delete Topic next oldest topic   next newest topic
Hop To:

Contact Us | rabble.ca | Policy Statement

Copyright 2001-2008 rabble.ca