Major security vulnerability found in Internet Explorer (again...)

[Vekseid]

http://news.bbc.co.uk/2/hi/technology/7784908.stm

"In this case, hackers found the hole before Microsoft did," said Rick Ferguson, senior security advisor at Trend Micro. "This is never a good thing."

As many as 10,000 websites have been compromised since the vulnerability was discovered, he said.

I should probably do another security article about why the former one may matter to you - if one site on such a machine gets compromised, they are all at risk, and if they get their code tampered with, it's usually to attempt to propogate vulnerabilities like these.

[Oniya]

This is why I keep telling our IT people that they should make the time-card program work on Firefox.  Or at least something other than IE.  (Not that my work hours are so terribly confidential, but who knows what else is on that server.)

[HairyHeretic]

One of the programs I have to use, a web based one, is designed to work with IE. Except for some reason it won't work with IE on my machine. I have to use Firefox with the IE tab plugin, and that works perfectly.

Go figure.

[gideonblake]

How good is Google Chrome on security? I must admit that I've moved over to that rather extensively, but I still use IE and Firefox on occasion. Chrome has trouble rendering some stuff and so does Firefox, but I prefer those over IE in general.

[HairyHeretic]

I've never given Chrome a try, so afraid I can't tell you.

[Oniya]

If you're concerned about security and use Chrome, remember to turn the keylogger off. True, it supposedly goes only to Google, but who's to say what hacker might try and catch the data before it gets there?

[TyCaine]

Have to say I haven't used IE since version 1.5 of FireFox, though I'm resisting the move to version 3 and keeping my version 2.20 going for as long as possible, but either way it's still way better than IE...

Of course, loading FF down with AddOns that may or may not have been secured as well as FF itself is not the best idea, each additional AddOn adding another potential breach point depending on distributer, but the core is solid.

Heard some reasonable reports on Chrome, but not enough to make me change yet...