Comments on: Researchers: 637 million browser users at risk

Researchers find that Internet Explorer users are less likely to update their browser to the latest version than users of Firefox, Opera, and Safari.

[Lerianis]

The main reason that people don't like to update to the latest version of Internet Explorer is because it has a bad history of 'breaking' some sites with each browser update. With updates to Firefox, Opera, etc. it is EXTREMELY rare for them to break a site once the actual, final release of a new update like Firefox 3 comes out.

[Penguinisto]

Re: website breakage... correct, but that's part and parcel of a history of website owners coding to "IE standard" instead of actual web standards... as IE marches towards being standards-compliant, coupled with real standards-compliant browsers out there (e.g. Firefox) and in large numbers, the breakage becomes less and less likely.

[Lerianis]

I wouldn't be too sure about that, Penguinisto. I have used IE8 'super-standards' mode recently, and it breaks a LOT of sites.
Maybe because the site itself directs it to the IE7 'hacked' page that it needed to work, but I'm not too sure about that.

[The_Decider]

A lot of site are broken, written by incompetent amateurs. If IE8 beta is "breaking" web pages then it is either one of two things(likely both): 1. IE rendering engine sucks. 2. The web page does not conform to standards.

[The_Decider]

How is this news? Windows users are technically not savvy. Windows is insecure by default, it takes a little knowledge and a lot of time to make it somewhat secure. Microsloth's idea of security is to annoy the users to the point that they ignore the security messages. It is a recipe for disaster that get realized time and time again.

[Lerianis]

Uh.... no, it doesn't take a little knowledge and a lot of time to make it somewhat secure. Install a firewall, install anti-virus, install anti-malware, and you are pretty much done.
Basically, the same stuff that you should be doing on a Mac and a Linux machine.

[The_Decider]

LOL no you are not. You have to keep them updated, you have to turn off all the unnecessary services that are running. Besides, most people do not know that they even have to do that. Mac and Linux do not require anti-malware software of any kind, just a firewall which a high quality one is installed and started by default, unlike the crappy one in Windows. That you even try to make Windows to appear like it is on the same level and Linux and OSX is laughable.

[The_Decider]

IE is the browser of choice of hackers because it is the lowest hanging fruit(i.e. the easiest). Maybe if IE usage slipped under 1% it might not be the leader in successful exploits.

[someguy999]

this conclusion is one aimed at providing nothing but fud for a number of reasons. first off you can't compare something apples to apples between IE and firefox.

with the long history of IE and firefox only recently releasing v3 (which I have image it assumes the 90% mark is based on v2) basically you're asking how many people are on V2... so in all reality here's the real question to show the validity of this statement: how many people were using v1 of firefox and truly made the upgrade (but even that's flawed because the only people who probably knew about v1 were very technically savvy open-source minded individuals) .. its sort of like saying I upgraded my car's gps to the latest and greatest, when my previous car didn't have a GPS (much along the same lines of my first firefox browser being v2... so I automatically get counted of "staying current", I didn't stay current, I just never used firefox before).

Second its not a matter of "Windows users are technically not savvy", that's just crap and makes someone feel good. I know an awful lot of xp users who are technically savvy however they've held off on upgrading becuase they just liked it better.

The results are just straight up flawed becuase you're not comparing apples to apples. Run the same survey in another 5 years and tell me how many firefox people are on the latest and greatest, I dare to say it will be the same results (nearly everyone who buys a computer from an OEM who isn't in the industry with firefox pre-installed will still have the same version on their machine as when they got it from the OEM) ... its human nature.

[Dalkorian]

Spoken like a true M$ lover. Make sure you ignore FireFox's history by focusing on the fact that it's only up to version 3, um, ever heard of Netscape before? Didn't think so. The blurb about "technically savvy" xp users who "held off on upgrading because they just liked it better" was absolutely hilarious, but I fear it actually made sense to you. I know it's summer vacation and all, but you shouldn't stop thinking just because your 5th grade teacher told you to have a fine summer break.

[t8]

This just proves that people who use Microsoft products are usually not very IT savvy. When I see an IE user or a business running MS Office, I see consumers who know no better.

[Lerianis]

Guess again. I run Microsoft Office, and I tried StarOffice, OpenOffice, AbiWord, etc...... I just didn't like ANY of them and switch to Microsoft Office after trying the latest version of Microsoft Works and the latest version of Microsoft Office.
I am even converting all my .odt files over to .docx files, because I LOVE Microsoft Office so much more than other programs I have tried.

[The_Decider]

Leria, every post you make proves you are not very IT savvy. Thanks for proving t8's point.

[Squashman2]

For our company it has a lot to do with Compatibility. We can't use IE7 yet because it does break one of our web apps.

[Dalkorian]

What company is that? Or are you now barred for disclosing that due to the fact that you just disclosed the fact that your web designers are bumbling vendor-locked amateurs who can only code to an obsolete version of the least secure browser in the world?

[The_Decider]

"developers" who code to a browser and not standards are not worthy of the title.

[Lerianis]

I have to agree with Dalkorian here. You should NOT code something so that it works on only ONE version of a browser, unless it is your own 'in-house' browser that ships with the program in question.

[humanssssss]

The companies that are interested in these Internet Explorer users are the one who will need to do something to improve security. Whether have the users switch to Firefox -- a more secure browser -- or create addon to improve Internet Explorer or have users install a free firewall provide by the companies. Whatever it is the solution, it is necessary to ensure the safety and security of users to improve commerce. Users won't engage in commerce when these fundamental foundations aren't in place.

[technewsjunkie]

That AntiTrust "Remedy" sure did a lot for browser market share, huh.

[wrog2]

> But unlike the food industry there is no liability for software vendors. And, the authors note, software vendors are not legally obligated to provide software updates.
> Imagine if the food industry was not accountable for selling spoiled milk.

Imagine an out-of-date browser actually putting somebody in the hospital.

More bogus analogies, please.

[Lerianis]

Actually, they aren't responsible for selling spoiled milk, as long as they have rotated their stock the way they should have and remove any other spoiled milk when they find out it is there.

[The_Decider]

A crappy browser like IE can do serious harm to a person. Perhaps not put them in a hospital, but at least on an equal level to that. More thought from MS fans please.

[thelemurking]

This is why Firefox runs on all my Win2k boxes at work...

[pchow98]

Don't forget that most companies don't allow individual employees to perform patch management and most companies don't allow IE6 to IE7 update because "it will confuse the users because of the interface looks different". Most Windows users also ignore the windows update notices and curse if Windows have to reboot. If the company installs Firefox on their users' computers, the Help Desk department will revoke because of the large amount of calls stemmed from "what should I do now that there's an update dialog box on the screen?" to "how come none of my usual add-ons don't work?", etc. This is a no-win situation because we don't require to users to be responsible for this type of activities and there's a dis-incentive for the users to be involved because it is deemed to be a "non-productive" activity.

[pchow98]

Don't forget that most companies don't allow individual employees to perform patch management and most companies don't allow IE6 to IE7 update because "it will confuse the users because of the interface looks different". Most Windows users also ignore the windows update notices and curse if Windows have to reboot. If the company installs Firefox on their users' computers, the Help Desk department will revoke because of the large amount of calls stemmed from "what should I do now that there's an update dialog box on the screen?" to "how come none of my usual add-ons don't work?", etc. This is a no-win situation because we don't require to users to be responsible for this type of activities and there's a dis-incentive for the users to be involved because it is deemed to be a "non-productive" activity.

[aaronjohnseldon]

Shame on you, CNet!!! This article is disappointing on many levels. What a coincidence that the study was sponsored by Google?!?

Among other things, the article leaves out mention to the disparity between corporate/personal users. Most personal computers I know of (unless they are pirated) are already running I.E. 7, with Microsoft auto-update enabled. All of the thousands of computers at my work site, however, are still on IE 6. Why? Because corporations don't like to perform software updates and as a rule, most of them disable the auto-update capabilities in favor of specifically timed and rolled-out releases.

Ask yourself which browser is used by corporations... I think we would all agree that it's Internet Explorer. Some simple math to demonstrate my point:
"Many corporations use IE" + "Many corporations don't use the latest software versions"
= "Many people are not using the latest version of IE"

Also conspicuously missing from the article is the issue of piracy. Users with pirated versions of XP cannot (easily) update to IE7, so it would be interesting to know how many of these vulnerable browsers can't be updated because they have failed WGA (Windows Genuine Advantage).

Finally, there is no mention of the fact that early adopters and technology enthusiasts make up a much larger percentage of the minority browsers. These are the same users that will always be quick to update their software, not just their browsers.

To me this whole article seems like some kind of stunt by Google to attack Microsoft. Everyone knows that Google backs Firefox, and I would say that this is very likely an effort to spite Microsoft. Of all the browsers mentioned, IE is by far the easiest to update, and Microsoft has gone to great lengths to make sure as many users as possible are using auto-update.

The only thing novel about this article was the idea to prominently display the number of missed updates that are currently available. This is a feature I have never seen in any piece of software, and the reason for this is probably that it increases awareness at the cost of fear-mongering.

This last point notwithstanding, this is truly unimpressive journalism, CNet. Very little substance to the article, and some obvious conflicts of interests from your primary sources.