Explorer Security Alert

Seems like there may be problems with IE.
I've not done any further Googling on this one but here's the article on the BBC site this morning.

http://news.bbc.co.uk/2/hi/technology/7784908.stm

 

Now using firefox

 

yep using Firefox on Linux so no problems here!

 

Just as well I've been using Linux and FireFox for the last couple of years after getting sick of all the malware that would find its way onto my machine under Windows, even with so called decent antivirus, firewall etc.

Now I enjoy relatively carefree browsing, with the occassional amusement as some page randomly complains that I need to install some plugin to view it properly (yes, I bet I do, a plugin that IE would install by default and then next thing I know I'm spending the next couple of hours getting rid of a virus and fixing my registry).

 

I use Windows XP (very rarely) and not online. For online I use Ubuntu and Firefox. XP is used for Windows specific hardware and software.

 

If its any help, here's what our IT Manager sent out yesterday...

I’ve done some research and the security alert only applies to IE7 or IE6 at Service Pack 1.


You may well be running IE7 on your home PC’s so I’ve included a link to the Microsoft advisory notice that describes the problem and possible workarounds http://www.microsoft.com/technet/security/advisory/961051.mspx

Just to put this in context for those of you who don’t really want to wade through the announcement:-
§ This is a recognized “hole” in the way IE works but it is only exposed when IE fails (when you get the “Do you want to send this failure report” message)
§ The security “hole” provides the potential for hackers to gain access to the storage that IE was using when it failed. Rebooting the PC clears memory so the exposure only exists for the period you are logged on and if IE has failed
§ So far there are only limited reports of it being exploited and only then to get passwords to games etc.
§ Running reputable firewall software is essential

I run IE7 at home and, to be honest, I’m not too concerned by this announcement. For what it is worth, it smacks to me of a good news story which will fill headlines.

 

Sorry if I seem a bit stupid here Aaron, but are you saying the 'bug' is only there if you report the failure? Or is it if you get the failure message, that you ignore it and reboot straight away?

I'm pretty confident (and I don't say that often ) because I don't use many sites on the net, plus my security is forever asking me '***** is trying to access the internet' etc, so that's a good thing isn't it?


cheers

 

I dunno!! Was sent by our IT bods and I thought I'd forward it on. Here's hoping someone else is more IT savvy than me.

My OH is an IT desktop support engineer so our computers at home are fully protected with every anti virus around! I think if you have that, then you should be ok, but from the news tonight, Microsoft are attempting a short term fix now.

 

According to what I read on the MS tech site this evening the patch is finished. You can download it now if you want, but I guess that they'll send it out as one of their updates which usually go out on Thursdays.
I use both Firefox and IE7, but until I've got the update in place I'll stick with Firefox. Anyone using IE7 or the Beta version of IE8 can crank up the protection levels (go to 'properties'in IE), but it doesn't half clobber access to many sites.
If you have decent virus protection that is regularly updated (mine checks ever hour) MS have informed most virus protection suppliers of the problem and I'd guess that updated virus signatures will be supplied by them within the next day or so or sooner.

 

This on BBC news this morning is worth a read as it gives a bit more detail

http://news.bbc.co.uk/1/hi/technology/7788687.stm

 

Thanks all for the info. I've read about the patch this morning Dave, but haven't gone onto the site cos I seem to be OK. Do you think I should anyway? I haven't 'heard' from MS at all.

Touch wood, I'm looking good,lol.

cheers

 

Spoke too soon, had an update from MS.

cheers

 

Yes. My vista has just done the auto update. No problems.
But like a lot of you I usaully use firefox. far more stable.
robert

 

do we know if it's sorted or am I better of sticking to firefox?