Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Redmond's Butterfly Effect
Tim Mullen, 2004-06-28

Criminals are benefiting from an Internet Explorer that's so complex even Microsoft can't predict its behavior.

Comments Mode:
Redmond's Butterfly Effect 2004-06-28
Anonymous (1 replies)
Redmond's Butterfly Effect 2004-06-29
Mene Tekel
Redmond's Butterfly Effect 2004-06-28
Anonymous (6 replies)
Redmond's Butterfly Effect 2004-06-28
Anonymous (1 replies)
Redmond's Butterfly Effect 2004-06-28
Anonymous
Redmond's Butterfly Effect 2004-06-29
Anonymous
Redmond's Butterfly Effect 2004-06-30
Anonymous (1 replies)
Redmond's Butterfly Effect 2004-07-02
Anonymous (2 replies)
Redmond's Butterfly Effect 2004-07-05
MadMonk
Redmond's Butterfly Effect 2004-07-09
Anonymous
Redmond's Butterfly Effect 2004-06-28
Ivanko (1 replies)
Redmond's Butterfly Effect 2004-06-30
Anonymous
Redmond's Butterfly Effect 2004-06-28
ISNYC
Redmond's Butterfly Effect 2004-06-28
Eric Lawrence (E_lawrence@hotmail)
Redmond's Butterfly Effect 2004-06-29
Anonymous
Redmond's Butterfly Effect 2004-06-29
Anonymous
IKEA can save our souls 2004-06-29
Anonymous
Redmond's Butterfly Effect 2004-06-29
Anonymous (1 replies)
Redmond's Butterfly Effect 2004-06-29
Anonymous
Redmond's Butterfly Effect 2004-06-29
Anonymous
Redmond's Butterfly Effect 2004-06-29
Anonymous
Lima / Lamo 2004-06-29
Anonymous (2 replies)
Lima / Lamo 2004-06-30
Anonymous
Lima / Lamo 2004-06-30
blacklight
Redmond's Butterfly Effect 2004-06-29
Anonymous
Redmond's Butterfly Effect 2004-06-30
blacklight
Redmond's Butterfly Effect 2004-06-30
Anonymous
The biggest problem that internet explorer has suffered from is "Feature Creep".

In theory a web browser should be more like a secure "tarpit" or a "sandbox", with the ability to interact and use websites, but keep those websites from interacting with system objects.

While features like: the ability to update an operating system from within a browser, intergration of the web browser directly into the operating system and the ability to use system level VBscript in the browser, may seem like excellent ideas, but they really aren't.

Personally, I think that Internet Explorer can be saved. But, it would require a complete re-think and re-write on microsofts part. Some things they could do to resurrect Internet Explorer:

1. Seperate WindowsUpdate into a dedicated, on-demand pull client like Symantec's LiveUpdate.

2. Seperate the browser from the operating system, give it it's own memory space and remove the file system objects entirely (in otherwords sandbox it). Re-think the API.

3. Seperate ActiveDesktop and Explorers features from the Web Browser.

4. Remove VBScript and do what the rest of the world is doing, use the W3 standards (XHTML, HTML, CSS, DHTML, EcmaScript, etc).

The alternative: WE DON'T USE INTERNET EXPLORER.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/251/27198#27198
Redmond's Butterfly Effect 2004-06-30
Anonymous (2 replies)
Redmond's Butterfly Effect 2004-06-30
Penguinisto (1 replies)
other OS's 2004-07-02
Anonymous
Redmond's Butterfly Effect 2004-07-02
Anonymous
even cert agrees 2004-06-30
Anonymous
Good read, though... 2004-06-30
Penguinisto
Redmond's Butterfly Effect 2004-07-01
DavidM (EDS)
Redmond's Butterfly Effect 2004-07-01
Anonymous
Alternative browsers 2004-07-01
Sandalle (1 replies)
Alternative browsers 2004-07-02
Anonymous (1 replies)
Less bugs 2004-07-03
Anonymous
Redmond's Butterfly Effect 2004-07-04
WR SecAddict
Mozilla / Fifefox / Opera ! 2004-07-04
Anonymous
Play with fire, get burned 2004-07-06
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus