Version: 2008

Comments on: Phishing hole discovered in IE

Microsoft says it's investigating a flaw in Internet Explorer that exposes even users of its most-protected Windows, SP2, to phishing attacks.

Add a Comment (Log in or register) (14 Comments)
  • prev
  • 1
  • next
This comes at a bad time.
by Dachi December 17, 2004 12:48 PM PST
I recently got a SunTrust phishing email to an account that rarely ever gets spam. It seems that phishing scams have been on the rise lately. The fact that this vuln impacts the latest and greatest means it will probably be 2 1/2 years before 80% of desktops are patched against it. Especially considering that XP SP2 is pretty much the last major release before Longhorn.


And slightly off topic, I think Microsoft could reduce part of the security problem by fixing their licensing. If my moms PC runs XP home, I should be able to install a Retail or OEM version of XP home SP2 on her PC with her existing product license. (after all is the same hardware ID)

Instead I am forced to try to download patches over a slow dialup, or just borrow her PC so I can update it here.

I also believe Microsoft should give customers the ability to "deactivate" their copy of windows so that it can be used on another PC instead.

Microsoft is pretty slow to understand things though, so expect some of these features in 2015.
Reply to this comment
This comes at a bad time.
by Dachi December 17, 2004 12:48 PM PST
I recently got a SunTrust phishing email to an account that rarely ever gets spam. It seems that phishing scams have been on the rise lately. The fact that this vuln impacts the latest and greatest means it will probably be 2 1/2 years before 80% of desktops are patched against it. Especially considering that XP SP2 is pretty much the last major release before Longhorn.


And slightly off topic, I think Microsoft could reduce part of the security problem by fixing their licensing. If my moms PC runs XP home, I should be able to install a Retail or OEM version of XP home SP2 on her PC with her existing product license. (after all is the same hardware ID)

Instead I am forced to try to download patches over a slow dialup, or just borrow her PC so I can update it here.

I also believe Microsoft should give customers the ability to "deactivate" their copy of windows so that it can be used on another PC instead.

Microsoft is pretty slow to understand things though, so expect some of these features in 2015.
Reply to this comment
Firefox someone?
by OLIRC December 20, 2004 12:11 PM PST
Guess Firefox or similar browsers will gain several users after this and other reports of IE bugs or what do you think?
Reply to this comment
Firefox someone?
by OLIRC December 20, 2004 12:11 PM PST
Guess Firefox or similar browsers will gain several users after this and other reports of IE bugs or what do you think?
Reply to this comment
SP2 difficulties
by December 20, 2004 12:36 PM PST
Just a short comment.
The reason Microsoft doesen't hear about the SP2 problems from consumers is that it wants to charge for tech support. Even only filiing a complaint.
I've also noticed that Zone Alarm (the free version) and SP2 don't work together. I don't consider SP2's firewall to be very good and now I'm left feeling defenseless.
Thanks,
Ken
Reply to this comment
SP2 difficulties
by December 20, 2004 12:36 PM PST
Just a short comment.
The reason Microsoft doesen't hear about the SP2 problems from consumers is that it wants to charge for tech support. Even only filiing a complaint.
I've also noticed that Zone Alarm (the free version) and SP2 don't work together. I don't consider SP2's firewall to be very good and now I'm left feeling defenseless.
Thanks,
Ken
Reply to this comment
There is an answer.......
by Prndll December 20, 2004 5:29 PM PST
The answer to this IS NOT to use Firefox....

There is a posted comment in previous CNET records where I did comment about SP2 when it first came on the scene. I said that there would be more problems and that SP2 is not the be-all and end-all.

The problem is the use of Windows XP. XP now comes with SP2 when you buy it. There is a problem here and it is with Windows XP. Security is ONLY a state of mind. You can spend all your money and all your time in the effort to create the most secure system, but in the end....security is nothing more than a state of mind. Windows XP will take full control of your computer. Microsoft may own the rights to XP but they DO NOT own my computer. My computer belongs to me. I alone will take full responsibility for my computer, but I cannot do that if I allow someone like microsoft to take control. I will never run Windows XP, if for no other reason than the flaky nature of SP2.

Some may want to use a Mac, others may wish to run Linux. I am not going to argue that point. I will however say that using Windows XP with SP2 is just about the worst thing you can do. I questioned XP when it first came out and I have yet to come across ANYTHING that is good enough to change my negative view of it.

Windows ME was truly flaky, and nothing older than Windows 98se is worth even thinking about.

The point.....
If you must use windows, use something older than XP. DO NOT USE XP.

and.....
If you must use Internet Explorer, DO NOT USE 6.0

The newest thing is not the best thing, it's just the newest thing.
Reply to this comment
"Security is ONLY a state of mind."
by Peter Reaper December 21, 2004 5:05 AM PST
You said: "Security is ONLY a state of mind."

LOL, that's a good one. Do you not lock your front door, use a seatbelt, open your eyes while driving, tie your shues, ... ? Of course you do (i hope)!

The point is that, yes, we are responsible for our own security, and if we do dumb things (e.g., download & run files of questionable origing), then we are to blame. But part of being responsible is also choosing the best available tools.

An important part of resposibly tending to ones security is to stop using the insecure browser called Internet Explorer. It seems that almost all security exploits are due to Microsoft's use of "Active-X" and its tying the browser (IE) into the operating system (Windows).

The BEST thing anyone can do in this regard is to use a more secure browser. My recommendation is:

Mozilla Firefox

http://www.GetFirefox.com
.
View reply
There is an answer.......
by Prndll December 20, 2004 5:29 PM PST
The answer to this IS NOT to use Firefox....

There is a posted comment in previous CNET records where I did comment about SP2 when it first came on the scene. I said that there would be more problems and that SP2 is not the be-all and end-all.

The problem is the use of Windows XP. XP now comes with SP2 when you buy it. There is a problem here and it is with Windows XP. Security is ONLY a state of mind. You can spend all your money and all your time in the effort to create the most secure system, but in the end....security is nothing more than a state of mind. Windows XP will take full control of your computer. Microsoft may own the rights to XP but they DO NOT own my computer. My computer belongs to me. I alone will take full responsibility for my computer, but I cannot do that if I allow someone like microsoft to take control. I will never run Windows XP, if for no other reason than the flaky nature of SP2.

Some may want to use a Mac, others may wish to run Linux. I am not going to argue that point. I will however say that using Windows XP with SP2 is just about the worst thing you can do. I questioned XP when it first came out and I have yet to come across ANYTHING that is good enough to change my negative view of it.

Windows ME was truly flaky, and nothing older than Windows 98se is worth even thinking about.

The point.....
If you must use windows, use something older than XP. DO NOT USE XP.

and.....
If you must use Internet Explorer, DO NOT USE 6.0

The newest thing is not the best thing, it's just the newest thing.
Reply to this comment
"Security is ONLY a state of mind."
by Peter Reaper December 21, 2004 5:05 AM PST
You said: "Security is ONLY a state of mind."

LOL, that's a good one. Do you not lock your front door, use a seatbelt, open your eyes while driving, tie your shues, ... ? Of course you do (i hope)!

The point is that, yes, we are responsible for our own security, and if we do dumb things (e.g., download & run files of questionable origing), then we are to blame. But part of being responsible is also choosing the best available tools.

An important part of resposibly tending to ones security is to stop using the insecure browser called Internet Explorer. It seems that almost all security exploits are due to Microsoft's use of "Active-X" and its tying the browser (IE) into the operating system (Windows).

The BEST thing anyone can do in this regard is to use a more secure browser. My recommendation is:

Mozilla Firefox

http://www.GetFirefox.com
.
View reply
Too Bad Article Didn't Mention a More Secure Alternative: FIREFOX
by Peter Reaper December 21, 2004 5:17 AM PST
In an article that documents yet another serious security hole in Microsoft's Internet Explorer, C|Net is doing a DISSERVICE TO ITS READERS by not at least mentioning that there exists a FAR MORE SECURE ALTERNATIVE:

Mozilla Firefox
http://www.GetFirefox.com

Mozilla not only patches their (few) vulnerabilities, it does is MUCH faster than MS.

To add insult to injury, IE has many MORE vulnerabilities than Mozilla.

IE: 69 Secunia Advisories (several highly critical)
http://secunia.com/product/11/

Firefox: 0 Secunia Advisories (none highly critical)
http://secunia.com/product/4227/

US Department of Homeland Security recommends: "Use a different web browser"
http://www.kb.cert.org/vuls/id/713878

Better "Security Architecture":
http://www.mozilla.org/security/security-announcement.html

This speaks a pretty clear language. Firefox is only a 4.5 MB download, it's free, it's better, and it's more secure. Sounds like a no-brainer to me. Here's the link:

Mozilla Firefox
http://www.GetFirefox.com
.
Reply to this comment
Too Bad Article Didn't Mention a More Secure Alternative: FIREFOX
by Peter Reaper December 21, 2004 5:17 AM PST
In an article that documents yet another serious security hole in Microsoft's Internet Explorer, C|Net is doing a DISSERVICE TO ITS READERS by not at least mentioning that there exists a FAR MORE SECURE ALTERNATIVE:

Mozilla Firefox
http://www.GetFirefox.com

Mozilla not only patches their (few) vulnerabilities, it does is MUCH faster than MS.

To add insult to injury, IE has many MORE vulnerabilities than Mozilla.

IE: 69 Secunia Advisories (several highly critical)
http://secunia.com/product/11/

Firefox: 0 Secunia Advisories (none highly critical)
http://secunia.com/product/4227/

US Department of Homeland Security recommends: "Use a different web browser"
http://www.kb.cert.org/vuls/id/713878

Better "Security Architecture":
http://www.mozilla.org/security/security-announcement.html

This speaks a pretty clear language. Firefox is only a 4.5 MB download, it's free, it's better, and it's more secure. Sounds like a no-brainer to me. Here's the link:

Mozilla Firefox
http://www.GetFirefox.com
.
Reply to this comment
(14 Comments)
  • prev
  • 1
  • next
advertisement

Latest tech news headlines

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

More feeds available in our RSS feed index.

advertisement