...why not just ditch IE altogether, as one of your colleagues sugested outright? It's not as if IE actually conforms fully to W3C, CSS, or any other real and open standard, and how many business environments really need their employees surfing the bells-and-whistles websites that would require IE and only IE) to view? Most vendors are smart enough to make their sites compatible with other browsers, especially nowadays. Those vendors who aren't will either adapt or die.

I say this because DirectX and all the neat-o features that MSFT bundles with IE have some neat occasional uses, but nowhere near enough use or benefit to justify the risk and exposure that it presents to one's network.

You said it yourself- IE is too bloated and complex for what it basically does.

Therefore, why bother? I know MSFT keeps it embedded deep into the Microkernel and make it inextractable for the sake of lawsuit CYA, but damn... maybe it's time they admitted for once that they screwed up, eat the results, and that IE be made completely removeable (or at least disable-able...)

Otherwise the growing mess with hostile spyware and one vuln after another will be the thing that finally kills Windows in the long run.

/P



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/251/27233#27233