Internet Explorer - Critical Fix

[Kym]

We don't normally post these but this is an out of band notice and applies to at least 55% of our members who use IE.
You may have seen it in the press already. Please update ASAP.

http://www.microsoft.com/technet/sec.../ms08-078.mspx

This security update resolves a publicly disclosed vulnerability. The vulnerability could allow remote code execution if a user views a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

This security update is rated Critical for Internet Explorer 5.01, Internet Explorer 6, Internet Explorer 6 Service Pack 1, and Internet Explorer 7. For information about Internet Explorer 8 Beta 2, please see the section, Frequently Asked Questions (FAQ) Related to This Security Update. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses the vulnerability by modifying the way Internet Explorer validates data binding parameters and handles the error resulting in the exploitable condition. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection under the next section, Vulnerability Information.

This security update also addresses the vulnerability first described in Microsoft Security Advisory 961051.

Recommendation. Microsoft recommends that customers apply the update immediately.

[davwhite]

How sweet it is to be a Mac user

[Kym]

How sweet it is to be a Mac user

Firefox 3.0.5 is out as well - need to update that as well Don't mention how many safari updates there are

[Tannin]

Kym is a polte and paitent man. Mostly, so am I. But just this once I am gong to tell it like it is.

If you are still using Internet Explorer, you are just plain stupid.

For years now there have been no less than three modern, safe browsers available to anyone who wants them. All three are technically superior to Internet Explorer, all three make a much better job of rendering web pages correctly, at least two of them are faster, all three are more stable and reliable, all three introduced (and continue to introduce) ease-of-use features that Explorer takes years to catch up with, and above all - none of the three is subject to the constant and often massive security problens that Internet Explorer suffers from.

There is no valid reason for anyone to continue using Internet Explorer as a primary browser. None. Nor is there any hope that it will eventually be able to offer security comparabe to that offered by the three modern browsers: Explorer's security issues stem not from a lack of attention to detail, but from a fundamentally flawed basic design, which they patch and patch and patch and patch, but it is impossible to fix faulty foundations by sticking on yet another layer of wallpaper to cover up the cracks. Internet Explorer's security issues wil go on forever, or until Microsoft redesign it from the ground up, whichever comes first.

Again, if you are still using Internet Explorer, you are just plain stupid.

For the love of Mike, do something about it.

• http://opera.com Opera: very fast, very customisable, very cool. Dares to be different.
• http://www.mozilla.com/en-US/firefox/all.html Firefox: simple to learn, very nearly as fast and stable as Opera, plain-jane but practical interface.
• http://www.seamonkey-project.org/ Old-school look and feel with up-to-the-minute code underneath. Think of it as Firefox without the dumbed-down, prettied-up interface. Bigger and slower to start up than the other two, but has more features than any other.

Please yourself which of the three good modern browsers you choose. We all have our personal favourite, but all three are excellent.

Tony


PS: Perhaps I should mention that I have been working with computers for 30 years now. For the last 17 years, part of my job has been to clean up infected computers for people, and teach then how not to get reinfected. I do this every working day, and I've had a lot of practice. Think of me, if you wish, as being like a doctor who has been treating lung cancer paitents every day for the last 17 years and sometimes gets a bit tired of it. Today, as an example, I had three machines come in for detoxification, which is about average. I spend 20 minutes or so with each owner, teaching them the basics of security. Because they are paying customers, I am polite and tactful about whatever stupid thing it was they did to get infected (or more typically, the stupid thing their teenage children did). But here, I am with friends, not paying customers, and there are things you can say to a friend that you would never say to a stranger. So, one more time: if you are still using Internet Explorer, you are stupid.

[Harves]

The only way to fix Internet Explorer is use Firefox

[davwhite]

I'm a Firefox person, don't use Safari.
And another bad program to use, all you PC people, is Outlook express or similar for your e-mail.
Very easy to get bugs in to that as well as IE because people have a love/hate relationship with Microsoft and will do anything to jam 'em up (Layman term)

[MarkChap]

OK Dad,

Have made the change back to Firefox

[Kym]

On a related note: Whirlpool have officially dropped support for IE 6. They are only programming for IE 7+ plus Firefox, Opera etc.

The Interweb world is in for a little shock in the next year or so. IE 8 (in beta now) will be unleashed and for the FIRST time Microsoft will be something close to W3C standards compliant which means sites written with IE6/7 only support may well break with a Microsoft browser.

Mind you, anyone that does not write cross browser code is silly. (CGU insurance last time I looked )

BTW: AP December MTD browser usage...
MS Internet Explorer 57.8 %
Firefox 33.7 %
Safari 5.3 %
Opera 2.4 %

IE usage is trending down as well (64% in January), AP members are getting smarter!

[MarkChap]

So are you suggesting that IE 8 will be close to being a half decent browser ??

Just curious, I will stick with F/Fox now I have gone back to it

[Kym]

So are you suggesting that IE 8 will be close to being a half decent browser ??
Just curious, I will stick with F/Fox now I have gone back to it

IE8 is Microsoft *finally* giving up on trying to hijack standards and playing nice. They are very much in catch up mode.
Firefox et. al. are way ahead.
It is good news for the average shmuck who does not know better; but no way am I making anything other than Firefox my main browser.

It also raises a question...
Does AP start using features that will break under IE6 and lower?
Not yet, or for a while... but there are possibilities of faster site rendering using Ajax technology in the upcoming VB 3.8 and a future V4. (Ajax is the technology that makes Google mail work)

IE usage breakdown... (refer above)
Msie 8.0 0.2 %
Msie 7.0 48.5 %
Msie 6.0 8.8 % <--- These members are strongly recommended to upgrade

Also: There are a few members using Firefox V2 ... time to get V3 !!

[Jcas]

I use FF for browsing and always have, however i have never deviated from the microsoft emailing programs,Outlook Express and Outlook. Are there better ones of these as well ????

[Kym]

I use FF for browsing and always have, however i have never deviated from the microsoft emailing programs,Outlook Express and Outlook. Are there better ones of these as well ????

Glad you asked!
refer: http://www.ausphotography.net.au/for...d.php?p=197371

Thunderbird from Mozilla - the fine folks who gave you Firefox!
http://www.mozilla.com/en-US/thunderbird/

I'm stuck with Outlook at work.

If you want an Open Source Outlook look-a-like Evolution maybe the answer...
http://www.dipconsultants.com/evolution/
(And given the student versions of Office 2007 don't include Outlook - it may really be what people need).

[Jcas]

Great links, thanks CypherOz, i am constantly amazed by the excellent content on this board ..

[Tannin]

Interesting stats, Kym. You prompted me to check the Red Hill figures just now. As you know, it's pretty much a computer geek site, so you expect IE to be lower and Firefox, Opera, and Seamonkey to be higher. The numbers bounce around a bit, but for what it's worth, rounded to the nearest whole number, for December so far they are running at:

Firefox: 43% (up from 39% in November)
IE: 41% (down from 49%)
Opera:5% up from 3%)
Safari: 5% (steady)
Seamonkey 5% (steady)

[I @ M]

Mind you, anyone that does not write cross browser code is silly. (CGU insurance last time I looked )

And then there is The Trading Post where some of their advertisers contact details are not available unless you use Microsock. I sent them an email advising them that and they wrote back saying they didn't want to change anything as most people use IE, good to be able to ignore 30% of the market, eh.
Then again when you see who owns the business these days I guess it's understandable.

[Seesee]

Seems I'm just plain stupid as I've been using IE and Outlook for 3 years and never a had a glitch that I can recall

However, rather than still be stupid ..I have just changed over to Firefox for browser and email and have found no difference in speed or efficiecy so far. But, my text now looks slightly different, not quite as bold or easy to read ???...any thoughts on that quirk, it's bugging me !


Just noticed as well my emails are still coming through outlook but I've marked that off as not my default server.....do I have to somehow completely uninstall Outlook to stop this ?


Also just noticed my Opanda Exif reader program no longer works ?...remedy please

[Seesee]

OK, nobody answering so I'll just uninstall Firefox and stick with IE and Outlook

[Kym]

OK, nobody answering so I'll just uninstall Firefox and stick with IE and Outlook

Sorry Col - missed your post.
Ctrl/+ Ctrl/- change the size in Firefox (Ctrl/0) sets to default. Does that help?

Also: In your case stay with Outlook - its ok with your setup. Its a probability game - you are *more* likely to have an issue with IE or Outlook than the alternates. But if you have a good setup and don't open suspect email attachments you will be ok 99.9% of the time.

Not having glitches in your case is about having your system reasonably setup with AV, patches etc. and not browsing to suspect places.

We can chat about it next time we catch up and, if you want, I'll set it all up for you

[Tannin]

Seems I'm just plain stupid as I've been using IE and Outlook for 3 years and never a had a glitch that I can recall

Mate, that's nuffin. I've been smoking for 30 years and I'm still not dead.

Obviously, thiose doctor chaps haven't got a clue.

[Tannin]

The difference in font rendering you are seeing is probably caused by ClearType settings.

ClearType is Microsoft's trade name for a technology that alters the way pixels are rendered, sacrificing accurate colour near the edges of objects (such as letters on your screen) in order to make smoother edges. It only works on LCD screens, and its effect varies significantly depending on the particular screen you have. On some screens, most people think text looks better, on other screens, most people think it looks worse. Some people like it, others hate it. Matter of taste. As a rule of thumb, the better the quality of your screen, and the more interested you are in accurate colour, the more likely you are to prefer ClearType off. But this seems to vary fairly unpredicatably, so it's often best to try it both ways and see which you prefer.

By default, ClearType is OFF on a system-wide basis, but ON in Internet Explorer. You can switch it off in IE very easily through the options menu, or switch it on system-wide through control panel >> display properties >> effects.

There are fancier things you can do to tune it to your taste or have it sometimes on and sometimes off, but we won't go there right now.

Alternatively, you can switch rendering engines: Firefox and Seamonkey both use one called Gecko, so they are similar in the way they display things. Opera uses its own rendering technoology and (at least to my eye) produces a more visually pleasing result. Try it and see for yourself.