Zero-day exploit - IE

Software d.  29. april. 2014, skrevet af Ferns
Vist: 4145 gange.

Ferns
 
Korrekturlæser
Tilføjet:
29-04-2014 20:37:29
Svar/Indlæg:
1442/81
"Last Saturday, a tech security firm made the appalling discovery that ever since the 2001 release of IE6, all versions of Microsoft's Internet Explorer have been plagued by a zero-day security flaw which hackers could use to easily gain remote control of your computer.

Just how bad is this security flaw? Bad enough that the governments of the United Kingdom and United States have advised everybody to stop using Internet Explorer altogether, at least until Microsoft develops and releases a patch to fix that gaping security hole.

(But remember: if your computer still runs on Windows XP, Microsoft will probably never develop a patch for you, because the company stopped supporting XP earlier this month.)

What to do
Even if you don't use XP, if your computer is one of the 55 percent (according to some estimates) worldwide using any version of IE6 through IE11 to go online, you need to stop using IE and switch to another browser right now.

Alternate browsers include Google Chrome, Mozilla Firefox, Opera and, for Mac users, Safari, included in all Mac operating systems. All are excellent and all are free.

You can download free, easy-to-install versions at these locations:

Google Chrome https://www.google.com/intl/en...
Mozilla Firefox http://www.mozilla.org/en-US/f...
Opera http://www.opera.com/


Zero-day
The security firm FireEye Research Labs announced the discovery of the zero-day exploit on Saturday, April 26. By Monday, the Department of Homeland Security's Computer Emergency Readiness Team (US-CERT) updated its website to give the following warning to anyone using Internet Explorer versions 6 through 11:

"US-CERT recommends that users and administrators review Microsoft Security Advisory 2963983 for mitigation actions and workarounds. Those who cannot follow Microsoft's recommendations, such as Windows XP users, may consider employing an alternate browser."

However, as of Tuesday morning, that Microsoft Security Advisory still had not been updated since April 26, the day FireEye first announced the IE security flaw. Presumably, when Microsoft does figure out how to fix the problem, it will update Advisory 2963983 to let everybody know. For now, it still says this:

"On completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs."

Prediction: when Microsoft does finally develop a fix they'll release it right away in an out-of-cycle update, rather than wait until the next regularly scheduled monthly update. Regardless of which option Microsoft chooses, though, the security updates will only apply to those operating systems Microsoft still supports - which is another way of reminding Windows XP users, "These security updates will not apply to your computer, so you need to stop using XP."

Klippet fra: http://www.consumeraffairs.com...
Biostud
 
Elitebruger
Tilføjet:
29-04-2014 23:19:04
Svar/Indlæg:
2897/83
Er der nogen der frivilligt bruger IE? 🤡


EasterKanin
 
Elitebruger
Tilføjet:
30-04-2014 05:16:51
Svar/Indlæg:
4337/121
#1 Det er der rigtig mange der gør specielt ældre mennesker med mindre de har købt i en ordenlig biks med ordenlig vejledning 🙂


Biostud
 
Elitebruger
Tilføjet:
30-04-2014 07:27:56
Svar/Indlæg:
2897/83
#2 Men er de på hwt.dk? 😛


EasterKanin
 
Elitebruger
Tilføjet:
30-04-2014 07:29:21
Svar/Indlæg:
4337/121
#3 Der skal jeg være dig svar skyldig 😀


tatoo1956
 
Overclocker
Tilføjet:
30-04-2014 10:14:35
Svar/Indlæg:
1630/101
Tjaa, jeg er da både ældre og bruger IE.. og det føler jeg mig ikke som en klovn over 🙂, jeg bruger både Crome og IE kombineret når jeg skriver artikler, for ingen af browserne kan det hele I CMS'en.

Svaret blev redigeret 1 gang, sidst af tatoo1956 d. 30-04-2014 10:14:56.


Fion
 
Bruger
Tilføjet:
30-04-2014 11:24:27
Svar/Indlæg:
74/9
Som tatoo siger, jeg bruger også IE stort set hver dag. Mozilia har kørt ustabilt på min bærbar og chrome gør den ekstremt langsom i forhold til IE. Jeg opdaterede bare IE, den virker til at være langt mere simpel og trækker mindre ressourcer til sig. Men på min stationær er rollerne byttet fuldstændig om.

Svaret blev redigeret 1 gang, sidst af Fion d. 30-04-2014 11:26:49.


eviling
 
Overclocker
Tilføjet:
30-04-2014 17:16:23
Svar/Indlæg:
442/14
Jeg bruger også IE til en del ting, dog er det ikke helt frivilligt.

På arbejde er det den eneste browser som kommunens systemer vil understøtte, i firefox og chrome er der en masse som ikke fungerer.

Og privat, når jeg laver hjemmesider til andre, er jeg jo desværre også nødt til at sikre at de også ser rigtige ud i IE :(