CERT recommends anything but IE

CERT recommends anything but IE
John Oates, The Register 2004-06-28

US CERT (the US Computer Emergency Readiness Team), is advising people to ditch Internet Explorer and use a different browser after the latest security vulnerability in the software was exposed.

Colapse all | Post comment

CERT recommends anything but IE 2004-06-28
Anonymous (2 replies)

mind supplying a link for that statement on CERT?...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-28
Anonymous (3 replies)

It's at http://www.kb.cert.org/vuls/id/323070

It's also a bit overblown, IMNSHO. The paragraph in question says:

"Use a different web browser

There are a number of significant vulnerabilities in technologies relating to the IE domain/zone security model, the DHTML object model, MIME type ...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Anonymous (5 replies)

I agree. Their statement is a common sense approach to avoiding THAT problem would be to use a different browser. Of course it does not say "Anything but IE" as claimed by the story title. This URL you have posted is the correct one as opposed to the URL provided by our prodigy "Any moose" farther d...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Anonymous

If they had HALF the capability of IE, they'd be just as vulnerable....

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Anonymous

a turd with bells and whistles is still a turd....

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Anonymous (1 replies)

And what capability, exactly, does IE have that the alternatives do not have?...

[ more ] [ reply ]

CERT recommends anything but IE 2004-07-02
Anonymous

IE has the ability to execute ActiveX. Other browsers do not have that native ability. IE has some controls on ActiveX, like trusted zones, etc... however that control structure has been compromised on many ocassions. You can download a plug-in to netscape browsers (mozilla also, I am not sure about...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-30
Anonymous

I like the Opera browser better than IE.

Mozilla brower is a good one.

I feel either one is as good as IE...

[ more ] [ reply ]

Half the capability? Pffft. 2004-07-01
Anonymous

I suggest you actually TRY some of the alternatives instead of shooting your mouth off. MSIE hasn't kept up with the pace since they crushed Netscape (that's what monopolism does for competitiveness!).

Several of the alternatives are now far *more* capable than MSIE. In fact with a little Googlin...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Anonymous (1 replies)

Well it comes to this..

There is a problem and if you want to avoid the problem for now don't use IE. Personally i haven't used IE in 2-3 years. I only use mozilla. Ive only been blocked from visiting a few sites but do you know what.. I can buy it somewhere else. So the hell with them to force...

[ more ] [ reply ]

CERT recommends anything but IE 2004-07-02
Masked Avenger (1 replies)

" Once anyother OS get's as much market share that too will be a target."

Even if this reasoning is flawed (I do not see the relationship between market share and software quality...) let assume we have 50%/50% share between Windows and say (one can dream...) Mac OS.

At least, when there is a ...

[ more ] [ reply ]

CERT recommends anything but IE 2004-07-06
Anonymous

who said market share effects sofware quality - your relation of these in terms of being a targeted browser for malware is illegitmate, therefore your flaw affecting 95% rather than 50% becomes an unbound variable in your response....

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Anonymous (1 replies)

it's kinda like, when your client has asked you for proposals to perform a certain action, you have to come up with all of the alternatives. One of the obvious alternatives that has to be included for completeness is "do nothing". That doesn't mean we recommend doing nothing, just that this is one ...

[ more ] [ reply ]

CERT recommends anything but IE 2004-07-01
alan at frangipani dot org

This is more than just a vulnerability that may someday affect Mozilla/Firefox/Opera when they get popular enough to become targeted as well.

Searching for "internet explorer" at http://www.securityfocus.com/bid/keyword/ brings up the latest list of IE vulns, many of which relate to this "cross-...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Brian McMahon <brian.mcmahon (at) cabrillo (dot) edu [email concealed]>

Vulnerability Note VU#323070 at http://www.kb.cert.org/vuls/id/323070 is probably what they're talking about. Last item under "III. Solution" is "Use a different web browser" with the cited text about the several "significant security vulnerabilities".

Although the article is in restrained, comm...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-28
mous anon

While getting patches in a more timly fashion is nice.... Getting MS patches that don't open new holes or break other things would be a good thing too.

...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-28
Any moose

ask and you shall recieve - http://www.us-cert.gov/cas/techalerts/TA04-163A.html

btw, that took all of 10 seconds....

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-28
Anonymous

There doesn't seem to be anything on the CERT home page (http://www.us-cert.gov/), activity page or advisory page. However, on the home page the link to the activity page shows one item was removed. Perhaps it's no longer up there....

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Straylight (2 replies)

CERT stopped being relevant a long time ago.

This is like the mac zealots who tell you if you don't use windows you'll never get a virus. Same flawed logic....

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Anonymous

Yes, you should keep on using Internet Explorer like a good M$ zealot because we all know that more patches will fix everything...

Come on, I really find it very hard to believe that anyone still uses IE except those people who are too uninformed/lazy to realize that there is something else out t...

[ more ] [ reply ]

CERT recommends anything but IE 2004-06-29
Anonymous

Simmilar logic yes but not completely flawed logic either. I use plenty of MS products in my daily work but also use alternatives when they make sense. Using Firefox instead of IE has made a mesurable difference in the amount of hostile code (spyware etc) on my machine and to a 250 seat customer of ...

[ more ] [ reply ]

Alternatives? 2004-06-29
Yaiker (7 replies)

Hi All...

Anybody got any suggestions for an alternative to IE? I'm using Mozilla FireFox since yesterday, seems pretty good... Any others?

Oh, does anybody know if theres a difference between the browser in the main Mozilla package, and the FireFox browser.

Yaiker...

[ more ] [ reply ]

Alternatives? 2004-06-29
Anonymous

Mozilla itself is a whole suite of web tools: browser, email client, chat client, html editor; and Firefox is just the browser component....

[ more ] [ reply ]

Alternatives? 2004-06-29
Anonymous

AFAIK there is very little difference between the browser in Mozilla and Firefox. I could, of course, be wrong. Go to Mozilla.org to see if I am or not.

And as for alternative browsers, other than Firefox and Mozilla, you could check out Opera @ http://www.opera.com/download. Plug the search term...

[ more ] [ reply ]

Alternatives? 2004-06-30
Anonymoose

1: Firefox is the best alternative, IMHO.

2: http://texturizer.net/firefox/faq.html#q1.3...

[ more ] [ reply ]

Alternatives? 2004-06-30
X-Commer

Opera 7.5 also seems pretty good. Actually I am completely satisfied with it....

[ more ] [ reply ]

Alternatives? Lots, but choose Firefox for business. 2004-07-01
Roger

1. Alternatives? Google "list of web browsers" and you'll find literally dozens. Some well regarded ones include Opera, Amaya, Off by One (low on features, but very small and very fast), and Safari (Macs only). Amaya is the W3C's official test-bed browser, so HTML compliance practically means "works...

[ more ] [ reply ]

Alternatives? 2004-07-01
Nunar

The Mozilla browser supports Multizilla where Firefox does not. It's a pretty trivial difference though......

[ more ] [ reply ]

Alternatives? 2004-07-02
Anonymous (1 replies)

Opera. www.opera.com It's the best stuff around. ;) And alot more fast than IE. lol. IE sux mouhahaha...

[ more ] [ reply ]

Alternatives? 2004-07-06
CaFFeinE

Yeah, Opera has ruled since win 3.1 days.

I used to run opera years ago on a dang 386 with 4mb ram. On that machine with win 3.1, Opera was still faster than IE was in my gf's win95 pentium box. Go figure. >;-)

Plus, designing websites for IE is a nightmare..argh.

Now, using opera 7.51 with...

[ more ] [ reply ]

CERT recommends anything but IE...FOR NOW! 2004-06-30
J Britton

CERT can recommend anything they want, the fact is, most ignorant computer users use IE, so thats the target audience for attackers. If Mozilla or Netscape became the browser of choice for a majority of people, attackers would focus their attention at those applications. And who's to say that thes...

[ more ] [ reply ]

CERT recommends anything but IE 2004-07-01
Anonymous

mozilla firefox works for me !

...

[ more ] [ reply ]

CERT recommends anything but IE 2004-07-02
Anonymous

I have been 100% Windows for awhile now. Everything that I was able to do in Windows, I can do in Linux, and even more. Oh, there is one thing that I no longer do like I did in Windows....reboot.

With Mandrake 10.0, Mozilla 1.7, and installing the latest JRE from Sun and Flash from Macromedia, ...

[ more ] [ reply ]

problem with alternatives 2004-07-03
ddoubled

I prefer NetScape (I'm using 7.1) to Opera or Mozilla but, unfortunately, at least a dozen web sites that I visit regularly in whole or in part do not work properly with it (or with Opera or Mozilla - the problem appears to be with the basic Mozilla code).

I can understand and accept the probl...

[ more ] [ reply ]

CERT recommends anything but IE 2004-07-06
Anonymous

I heard on a repley post that IE has twice the features of the alternatives. Another post asked, "what are the extra features not found in the alternative products". Other than activeX, what are the other multitude of features that exist that can not be found in Mozilla, Netscape, etc. To be twic...

[ more ] [ reply ]