PC Review


Reply
Thread Tools Rate Thread

CERT Advisory

 
 
John Coutts
Guest
Posts: n/a
 
      7th Jul 2004
People are finally starting to get the message that Internet Explorer is not
safe to use (something I have saying for years), and Microsoft stock prices
are reflecting it.

http://story.news.yahoo.com/news?tmp...40702/tc_cmp/2
2103407

CERT issused an advisory on June 11, 2004 about a cross domain vulnerability,
and Microsoft got around to plugging one of the holes on July 2, 2004. In
actual fact, both Mozilla and IE suffer from this vulnerability, but since
Mozilla doesn't support ActiveX there is not much can be done with it. As long
as your IE has ActiveX and Active Scripting enabled, you are vulnerable, and
the number of compromised IIS Web sites is reportedly quite large!

J.A. Coutts

 
Reply With Quote
 
 
 
 
Sir_George
Guest
Posts: n/a
 
      7th Jul 2004
John,

Well it appears that your observation about the vulnerability of MS Internet
Explorer was on the "cutting edge." Perhaps, if you haven't already
considered it, computer security should be a consideration as a career path.

I doubt that very few people ever dreamed that the premier and most popular
browser would ever be the target of attacks that would expose its
vulnerability.

--
Sir_George
For better access to newsgroups;
http://www.microsoft.com/windowsxp/p...oups/setup.asp


"John Coutts" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> People are finally starting to get the message that Internet Explorer is

not
> safe to use (something I have saying for years), and Microsoft stock

prices
> are reflecting it.
>
>

http://story.news.yahoo.com/news?tmp...40702/tc_cmp/2
> 2103407
>
> CERT issused an advisory on June 11, 2004 about a cross domain

vulnerability,
> and Microsoft got around to plugging one of the holes on July 2, 2004. In
> actual fact, both Mozilla and IE suffer from this vulnerability, but since
> Mozilla doesn't support ActiveX there is not much can be done with it. As

long
> as your IE has ActiveX and Active Scripting enabled, you are vulnerable,

and
> the number of compromised IIS Web sites is reportedly quite large!
>
> J.A. Coutts
>



 
Reply With Quote
 
Buffalo
Guest
Posts: n/a
 
      8th Jul 2004

"John Coutts" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> People are finally starting to get the message that Internet Explorer is

not
> safe to use (something I have saying for years), and Microsoft stock

prices
> are reflecting it.


Well, just goodie for you.
Get a life.


 
Reply With Quote
 
David Qunt
Guest
Posts: n/a
 
      8th Jul 2004
"Sir_George" <(E-Mail Removed)> squirted these wordjisms deep
inside the bumtube of the newstwat in news:(E-Mail Removed):

> John,
>
> Well it appears that your observation about the vulnerability of MS
> Internet Explorer was on the "cutting edge." Perhaps, if you haven't
> already considered it, computer security should be a consideration as
> a career path.
>
> I doubt that very few people ever dreamed that the premier and most
> popular browser would ever be the target of attacks that would expose
> its vulnerability.
>


He was reporting on a bulleti from CERT. Very little of what he said was
his own editorialising. Your sarcasm is therefore puzzling.

It doesn't matter that IE is 'attackled' more because it is 'more popular',
as you seem to suggest. It is attacked because there are vulnerabilities in
it, and scope to wreak havoc. Most other browsers simply don't have those
vulnerabilities, because they don't allow nonsense like ActixeX.

The fact remains that the MS browser is full of holes and peoople are best
advised using an alternative. That fact has been fairly well-known for
years, and it seems from the tone of your post that you are annoyed because
the CERT bulletin now makes that official.

--
*********************************
> David Qunt
>

****************************************************
 
Reply With Quote
 
Sir_George
Guest
Posts: n/a
 
      8th Jul 2004
Dave,

This is what John said;

"People are finally starting to get the message that Internet Explorer is
not
safe to use (something I have saying for years), and Microsoft stock prices
are reflecting it."

John made it an issue that he was aware of this pending vulnerability in IE
years ago and his reference to the article was merely a supporting piece of
information to prove how right he was in identifying it way back then.
Additionally he implies that pc users are not all that bright with his
statement "People are finally starting to get the message."

John appears to be, from my point of view, a tad boastful and condescending,
thus my reply to his post.

--
Sir_George
For better access to newsgroups;
http://www.microsoft.com/windowsxp/p...oups/setup.asp


"David Qunt" <(E-Mail Removed)> wrote in message
news:Xns952031D88AAF000oooQuntooo000@194.168.222.121...
> "Sir_George" <(E-Mail Removed)> squirted these wordjisms deep
> inside the bumtube of the newstwat in news:(E-Mail Removed):
>
> > John,
> >
> > Well it appears that your observation about the vulnerability of MS
> > Internet Explorer was on the "cutting edge." Perhaps, if you haven't
> > already considered it, computer security should be a consideration as
> > a career path.
> >
> > I doubt that very few people ever dreamed that the premier and most
> > popular browser would ever be the target of attacks that would expose
> > its vulnerability.
> >

>
> He was reporting on a bulleti from CERT. Very little of what he said was
> his own editorialising. Your sarcasm is therefore puzzling.
>
> It doesn't matter that IE is 'attackled' more because it is 'more

popular',
> as you seem to suggest. It is attacked because there are vulnerabilities

in
> it, and scope to wreak havoc. Most other browsers simply don't have those
> vulnerabilities, because they don't allow nonsense like ActixeX.
>
> The fact remains that the MS browser is full of holes and peoople are best


> advised using an alternative. That fact has been fairly well-known for
> years, and it seems from the tone of your post that you are annoyed

because
> the CERT bulletin now makes that official.
>
> --
> *********************************
> > David Qunt
> >

> ****************************************************



 
Reply With Quote
 
-nobody-
Guest
Posts: n/a
 
      9th Jul 2004
your sig link does not work


"Sir_George" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Dave,
>
> This is what John said;



 
Reply With Quote
 
Sir_George
Guest
Posts: n/a
 
      9th Jul 2004
-nobody-,

Thanks for the notification. I hadn't tried the link for quite some time.

--
Sir_George


"-nobody-" <(E-Mail Removed)> wrote in message
news:20040708214753.304$(E-Mail Removed)...
> your sig link does not work
>
>
> "Sir_George" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Dave,
> >
> > This is what John said;

>
>



 
Reply With Quote
 
David Qunt
Guest
Posts: n/a
 
      11th Jul 2004
"Sir_George" <(E-Mail Removed)> squirted these wordjisms deep
inside the bumtube of the newstwat in news:(E-Mail Removed):

> Dave,
>
> This is what John said;
>
> "People are finally starting to get the message that Internet Explorer
> is not
> safe to use (something I have saying for years), and Microsoft stock
> prices are reflecting it."
>
> John made it an issue that he was aware of this pending vulnerability
> in IE years ago and his reference to the article was merely a
> supporting piece of information to prove how right he was in
> identifying it way back then. Additionally he implies that pc users
> are not all that bright with his statement "People are finally
> starting to get the message."
>
> John appears to be, from my point of view, a tad boastful and
> condescending, thus my reply to his post.
>



OK, fair enough.

I'm not bothered about his tone, since his underlying point, ie that CERT
have said that IE is an unsafe browser and advocate switching to something
else, is a valid one.

--
*********************************
> David Qunt
>

****************************************************
 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
advisory Richard Urban Windows Vista General Discussion 29 11th Jun 2009 12:38 AM
1200 page doc, want prnt only cert pages, select cert page but all sp1977 Microsoft Word Document Management 3 26th Jan 2009 06:56 PM
Content Advisory =?Utf-8?B?Y3JvbWUzNzA3?= Windows XP Help 2 8th Feb 2007 11:17 PM
IE Advisory Peter Foldes Windows XP Internet Explorer 0 22nd Nov 2005 01:20 PM
Content Advisory Chris Microsoft Access Security 0 13th Sep 2003 02:12 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 10:17 PM.