Another day, another IE vulnerability revealed

[pokerfan]

If you use any version of Internet Explorer to surf Twitter or other Web 2.0 sites, Jorge Luis Alvarez Medina can probably read the entire contents of your primary hard drive.

The security consultant at Core Security said his attack works by clicking on a single link that exploits a chain of weaknesses in IE and Windows. Once an IE user visits the booby-trapped site, the webmaster has complete access to the machine's C drive, including files, authentication cookies - even empty hashes of passwords.

http://www.theregister.co.uk/2010/01/27/ie_file_disclosure_attack

[hobbit709]

1. Then I'm doubly secure

I don't twit and I refuse to use Internet ExploDer.

[lpbk2713]

2. ... and I don't ever go to websites given to me in emails from people I never heard of.

"Come to my website", said the spider to the fly.



:eyes:

[pokerfan]

3. It's virtually impossible to avoid Web 2.0 sites these days

http://en.wikipedia.org/wiki/Web_2.0

[RC]

4. Spread the word.

http://www.free-the-web.com/

Actually it would be a good idea to boycott all versions of Internet Explorer.

[pokerfan]

5. The article says all versions of IE are vulnerable

so yeah, it's best to just say no to IE.

Firefox, Opera, Chrome... so many better alternatives that are faster and more compliant with web standards. Test your current browser here: http://acid3.acidtests.org

(Acid3 is a test page from the Web Standards Project that checks how well a web browser follows certain selected elements from web standards, especially relating to the Document Object Model and JavaScript.)
http://en.wikipedia.org/wiki/Acid3

[Occulus]

6. What does box five represent?

If you say "the Phantom of the Opera" I will smack you.

[pokerfan]

7. mo boxes = mo better