It's time to dump Microsoft's Internet Explorer

http://www.chron.com/cs/CDA/ssistory.mpl/business/2652018

The attack — a virus known as Download.Ject or Scob, depending on which security-software company is trying to sell you its products — is actually a one-two punch. Its creators took advantage of flawed versions of Microsoft's Web server software. The server problems were fixed in a patch released in April, but there are still a lot of unpatched machines out there. This allowed placement of an installer program on Web sites users might otherwise trust.

When an IE user views a Web page from an infected machine, the server plants the virus. Fortunately, the installer snagged its copy of the virus from a computer in Russia, which on Friday was disabled. But machines that were infected received a program that collects sensitive information such as passwords and credit card numbers and sends it to a third party.

Because there's no patch for IE users, Microsoft offered suggestions to avoid being infected, but the steps create problems of their own. For example, users were told to turn off Javascript capabilities and bump IE's security settings to high — actions that will affect how many Web sites display and behave.

Until Microsoft gets its act together, the safest thing to do — along with religiously keeping up with patches and updating antivirus software — is to use a non-Microsoft browser. That includes Netscape's latest (channels.netscape.com/ns/browsers/); its open-source first cousins, Mozilla and Firefox (www.mozilla.org/download.html); and Opera, a shareware program that you can try for free, then purchase (www .opera.com). Firefox is my personal favorite (see www.chron.com/firefox), and a new version, 0.9, was released earlier this month.

But I'm using Linux, so I didn't have the option of IE in the first place. I think everyone should use Linux. It's much more stable than Windows will ever be, in my opinion.

Been meaning to switch to Linux. Any suggestions for a more user-friendly Linux distro with an (relatively speaking) easier learning curve? I keep meaning to sit myself down and learn it, but I never have the patience. I've fiddled around with Knoppix, but since I never really learned programming, I'm lost when it comes to the console commands.

I've compiled everything from source code. "Linux From Scratch." It's quite the learning experience. But I hear that Mandrake is a good distro to start with. Supposedly just as easy as installing Windows, but I can't say for sure since I've never used it. Good luck if you take the plunge; you're welcome to PM me if you have questions -- I'll try to help -- no promises though. ;)

installed in a jiffy, faster than windows. Not so easy to get all hooked up (webcam/printer/modem/LAN/...


and now I should sit down & read & learn to use it

:P

Bump for tabbed browsing DU in Firefox!

Mozilla Browser Address Bar Spoofing Weakness

http://secunia.com/advisories/11856/

A weakness has been reported in Mozilla, allowing malicious people to conduct phishing attacks.

The weakness is caused due to an error within the handling of URLs. This can be exploited to potentially trick users into supplying sensitive information to a malicious web site, because information displayed in the address bar can be constructed in a certain way, which may lead users to believe that they're visiting another web site than the displayed web site.

Successful exploitation requires that a malicious web site's domain supports wildcard DNS and accepts invalid values in the "Host:" header.

The weakness has been confirmed in Mozilla 1.6 and 1.7rc3 for Windows and Firefox 0.8 and 0.9rc for Windows. Other versions may also be affected.

?

This is a bit different than just going to a webpage and getting a virus.

This requires you to believe you are somewhere else and then enter your info.

Yes a security risk, but compared to microsoft's gaping security holes, I think I would go with mozilla or another browser anyday.

TWL

p.s. on mozilla for over a year now.

Mozilla Firefox is highly regarded. May have problems with pages configured for IE. In that case, get Avant Browser.

Also the old standby Netscape, which created the Mozilla script.

And, if you feel like parting with a little cash, try Opera.

I use Avant as my default browser, but I've been running into lag problems with newer versions. I'm starting to lean toward my backup, Firefox.

IE sucks. Keep it, since Windows utilizes it. But get the shortcut off your desktop. You're insane if you use it to surf the web, Google toolbar or not.

But it's not working in the 0.9.x versions so far.

It's the only way to go. Like the article says, there are some sites which require IE to function properly but 95% of the time, I use Firefox now.

I use OSX with Safari and Mail, so I have no idea :evilgrin:

I use XP with Internet Explorer, and I have never had a virus. :evilgrin:

Mac OS X security myth exposed

Windows is more secure than you think, and Mac OS X is worse than you ever imagined. That is according to statistics published for the first time this week by Danish security firm Secunia.

The stats, based on a database of security advisories for more than 3,500 products during 2003 and 2004 sheds light on the real security of enterprise applications and operating systems, according to the firm. Each product is broken down into pie charts demonstrating how many, what type and how significant security holes have been in each.

One thing the hard figures have shown is that OS X's reputation as a relatively secure operating system is unwarranted, Secunia said. This year and last year Secunia tallied 36 advisories on security issues with the software, many of them allowing attackers to remotely take over the system -- comparable to figures on operating systems such as Windows XP Professional and Red Hat Enterprise Server.

"Secunia is now displaying security statistics that will open many eyes, and for some it might be very disturbing news," said Secunia chief executive Niels Henrik Rasmussen. "The myth that Mac OS X is secure, for example, has been exposed."

It was interesting the first 100 times it was shown to be bullshit. But thanks for playing!

was It shown to be bullshit?

and it works great. Mozilla will be tested this week as well.

M$ security threats would arrive on a monthly basis like a broken record. Why doesn't M$ get their act together?

http://www.opera.com

If a user does these two things, they will have no problem with viruses, right?

Can't believe I struggled with IE for so many years. I highly recommend Mozilla.