Browser Vulnerabilities

Locked
User avatar
raw
Posts: 2739
Joined: Tue Nov 16, 1999 8:00 am

Browser Vulnerabilities

Post by raw »

There's a few new holes out there for IE5+ (Including 7 BETA 2) which I thought you should all know about.

http://secunia.com/Internet_Explorer_Ad ... ility_Test

I've tested this and the fix works but is a pain in the ass to get the sites you want to work (that use active scripting). Once its set up, it's quite secure.

Oh, and for you Firefox junkies, it appears to be more vulnerable than IE :))

http://secunia.com/advisories/19631/

CheapAlert
Posts: 448
Joined: Tue Mar 19, 2002 8:00 am

Re: Browser Vulnerabilities

Post by CheapAlert »

raw wrote:Oh, and for you Firefox junkies, it appears to be more vulnerable than IE :))

http://secunia.com/advisories/19631/
no worries as my firefox autoupdated the few days before. Eat that M$.
Leader and director of the [url=http://cheapy.deathmask.net]OpenArena[/url] project which is a free software version of q3a designed for hobo fagts
Tormentius
Posts: 4108
Joined: Sat Dec 14, 2002 8:00 am

Post by Tormentius »

Nice find. Thanks :icon14:
Oeloe
Posts: 1529
Joined: Fri Mar 19, 2004 8:00 am

Post by Oeloe »

It isn't like Secunia is an all-knowing authority that has a complete list of vulnerabilities of all browsers. Whenever new security holes in FF are found, the Mozilla team will generally respond more quickly than MS to fix them.
Last edited by Oeloe on Tue Apr 18, 2006 10:36 pm, edited 1 time in total.
User avatar
Foo
Posts: 13840
Joined: Thu Aug 03, 2000 7:00 am
Location: New Zealand

Post by Foo »

Does firefox even need to make the security pitch anymore? IE has a terrible interface, and even the newest preview versions look like someone took a shit on a VB form.
"Maybe you have some bird ideas. Maybe that’s the best you can do."
― Terry A. Davis
Tormentius
Posts: 4108
Joined: Sat Dec 14, 2002 8:00 am

Post by Tormentius »

Foo wrote:Does firefox even need to make the security pitch anymore? IE has a terrible interface, and even the newest preview versions look like someone took a shit on a VB form.

Considering the number of vulnerabilities seems to be increasing with Firefox in direct proportion to their market share I'd say no, they shouldn't be making the security pitch.

IE7's interface is a huge improvement over previous versions IMO.
User avatar
Foo
Posts: 13840
Joined: Thu Aug 03, 2000 7:00 am
Location: New Zealand

Post by Foo »

Tormentius wrote:IE7's interface is a huge improvement over previous versions IMO.
I'll give you that, for sure.

MS have more a general issue with their presentation than any localised issue TBH. Can't help thinking they'd gain more market share if they learned the simple lesson 'less is more'.
"Maybe you have some bird ideas. Maybe that’s the best you can do."
― Terry A. Davis
Tormentius
Posts: 4108
Joined: Sat Dec 14, 2002 8:00 am

Post by Tormentius »

Foo wrote:Can't help thinking they'd gain more market share if they learned the simple lesson 'less is more'.
Quite agreed.
^misantropia^
Posts: 4022
Joined: Sat Mar 12, 2005 6:24 pm

Post by ^misantropia^ »

The astute reader will notice that most of the Firefox vulnerabilities are JavaScript exploits. Using the NoScript extension and only allowing trusted sites to run JS will alleviate the problem a great deal.
User avatar
Foo
Posts: 13840
Joined: Thu Aug 03, 2000 7:00 am
Location: New Zealand

Post by Foo »

riddla wrote:
Foo wrote:MS.... Can't help thinking they'd gain more market share if they learned the simple lesson 'less is more'.
Bau·haus adj. Of, relating to, or characteristic of a 20th-century school of design, the aesthetic of which was influenced by and derived from techniques and materials employed especially in industrial fabrication and manufacture. The core aesthetic of the Bauhaus methodology is that "form always follows function".
Ah, but which if the three generations of bauhaus do you follow?
"Maybe you have some bird ideas. Maybe that’s the best you can do."
― Terry A. Davis
Oeloe
Posts: 1529
Joined: Fri Mar 19, 2004 8:00 am

Post by Oeloe »

How about a Jugendstil browser. :icon26:
Tormentius
Posts: 4108
Joined: Sat Dec 14, 2002 8:00 am

Post by Tormentius »

^misantropia^ wrote:The astute reader will notice that most of the Firefox vulnerabilities are JavaScript exploits. Using the NoScript extension and only allowing trusted sites to run JS will alleviate the problem a great deal.
Most of the IE exploits also involve active scripting of some form or another. Active scripting in general is the single largest point of vulnerability in any browser.
Zimbo
Posts: 239
Joined: Fri Feb 11, 2005 10:50 pm

Post by Zimbo »

You should try the Opera 9 beta. It's fast, free, stable, and now that it blocks most popups and ads, it's really just as good as Firefox. And it doesn't have memory leaks.
Zimbabwe
User avatar
raw
Posts: 2739
Joined: Tue Nov 16, 1999 8:00 am

Post by raw »

Oeloe wrote:It isn't like Secunia is an all-knowing authority that has a complete list of vulnerabilities of all browsers. Whenever new security holes in FF are found, the Mozilla team will generally respond more quickly than MS to fix them.
This happens to ring true :p the fix was released today per that link I already posted.
Locked