Attacks on Unpatched IE Flaw Escalate

Ye' old general discussion board. Basically, for everything that isn't covered elsewhere. Come here to shoot the breeze, shoot your mouth off, or whatever suits your fancy.
This forum is not for asking programming related questions.

Moderator: General Moderators

Post Reply
User avatar
hawleyjr
BeerMod
Posts: 2170
Joined: Tue Jan 13, 2004 4:58 pm
Location: Jax FL & Spokane WA USA

Attacks on Unpatched IE Flaw Escalate

Post by hawleyjr »

There are people out there who still use IE...?

http://blog.washingtonpost.com/security ... r_f_1.html
More than 200 Web sites -- many of them belonging to legitimate businesses -- have been hacked and seeded with code that tries to take advantage of a unpatched security hole in Microsoft's Internet Explorer Web browser to install hostile code on Windows computers when users merely visit the sites.

http://www.getfirefox.com :) :) :)
User avatar
Burrito
Spockulator
Posts: 4715
Joined: Wed Feb 04, 2004 8:15 pm
Location: Eden, Utah

Re: Attacks on Unpatched IE Flaw Escalate

Post by Burrito »

hawleyjr wrote:There are people out there who still use IE...?
ahem :evil:
User avatar
John Cartwright
Site Admin
Posts: 11470
Joined: Tue Dec 23, 2003 2:10 am
Location: Toronto
Contact:

Post by John Cartwright »

We've been down this road, and it is an ugly one.. 8)
User avatar
shiznatix
DevNet Master
Posts: 2745
Joined: Tue Dec 28, 2004 5:57 pm
Location: Tallinn, Estonia
Contact:

Post by shiznatix »

me, I quite computers a long time ago. Way to many hackers and viruses out there. I just use a abacus and a few birds that I learned to talk to a while ago. Nobody has hacked my system yet. Yes, my system is open source.
Gambler
Forum Contributor
Posts: 246
Joined: Thu Dec 08, 2005 7:10 pm

Post by Gambler »

Bumper sticker ideas:

Code: Select all

God bless Firefox

Code: Select all

Support our Open Source developers

Code: Select all

Proud MS hater
chinhnt2k3
Forum Newbie
Posts: 6
Joined: Tue Mar 28, 2006 5:26 am
Location: Nottingham, UK
Contact:

M$ sucks

Post by chinhnt2k3 »

M$ sucks :twisted:
Saturday, March 25, 2006
Microsoft Confirms IE Under Attack
By Mary Jo Foley

That unpatched flaw in Internet Explorer that we told you about earlier in the week? It's already being exploited by hackers who are using hijacked Web servers and compromised Web sites to launch a wave of attacks against Microsoft browser users. The exploited servers and sites are dropping a variant of SDbot, which is a family of backdoors which provide hackers with total access to infected computers. Microsoft says the impact is limited so far. But security experts aren't so sure the attacks won't spread like wildfire.
Source: Microsoft watch
Updated: Microsoft confirms a wave of drive-by downloads targeting a zero-day browser vulnerability and says Internet Explorer users can expect a patch on April 11, if not sooner.
Source: Microsoft watch
Gambler
Forum Contributor
Posts: 246
Joined: Thu Dec 08, 2005 7:10 pm

Post by Gambler »

What happened with "this forums if for helping people, not bashing technologies you don't like"? Oh, I get it. Bashing microsoft helps people to feel better about themselves. Never mind then.
...
Get ELinks. Now. That's an order. I mean, command... line browser. Do not dissapoint the command line community.
User avatar
AKA Panama Jack
Forum Regular
Posts: 878
Joined: Mon Nov 14, 2005 4:21 pm

Re: Attacks on Unpatched IE Flaw Escalate

Post by AKA Panama Jack »

hawleyjr wrote:There are people out there who still use IE...?

http://blog.washingtonpost.com/security ... r_f_1.html
More than 200 Web sites -- many of them belonging to legitimate businesses -- have been hacked and seeded with code that tries to take advantage of a unpatched security hole in Microsoft's Internet Explorer Web browser to install hostile code on Windows computers when users merely visit the sites.

http://www.opera.com :) :) :)
You are right Opera is the best alternative. :D
timvw
DevNet Master
Posts: 4897
Joined: Mon Jan 19, 2004 11:11 pm
Location: Leuven, Belgium

Post by timvw »

All users that don't take care of their computer (or don't employ someone to do it for them) SUCK. No matter what OS or browser they use...

(Seen my share of "forgotten" linux machines last summer holiday)
User avatar
RobertGonzalez
Site Administrator
Posts: 14293
Joined: Tue Sep 09, 2003 6:04 pm
Location: Fremont, CA, USA

Post by RobertGonzalez »

Have had my share of nasty experiences with IE. Now I use it only to cross-test my development projects to make sure they render somewhat like what I want them to (there are standards for a reason, Microsoft). Anyhow, IE and Opera are my test browsers. Firefox is my production browser. Not too many problems with this set up 8) .
Grim...
DevNet Resident
Posts: 1445
Joined: Tue May 18, 2004 5:32 am
Location: London, UK

Post by Grim... »

Someone get the padlock out, ten people just saying the same thing is embarrasing.
User avatar
Maugrim_The_Reaper
DevNet Master
Posts: 2704
Joined: Tue Nov 02, 2004 5:43 am
Location: Ireland

Post by Maugrim_The_Reaper »

M$ is EVIL, I say! Evil! Hahahahahahaha.

On a serious note, MS are not the only ones slow to fix bugs and exploits. They are not an exception.
timvw
DevNet Master
Posts: 4897
Joined: Mon Jan 19, 2004 11:11 pm
Location: Leuven, Belgium

Post by timvw »

I don't find Microsoft evil. The problem lies with the evil people that actually buy (or use) their products because they indicate that Microsoft isn't that bad after all.

As soon as people stop buying their products even a company like Microsoft will change it's policy and if it doesn't it will disappear from the market (in this case it might take a while though).
User avatar
patrikG
DevNet Master
Posts: 4235
Joined: Thu Aug 15, 2002 5:53 am
Location: Sussex, UK

Post by patrikG »

Some background:

http://news.bbc.co.uk/go/rss/-/1/hi/tec ... 856492.stm

MS suffers from having become a dinosaur, that's all.
Roja
Tutorials Group
Posts: 2692
Joined: Sun Jan 04, 2004 10:30 pm

Post by Roja »

Gambler wrote:What happened with "this forums if for helping people, not bashing technologies you don't like"? Oh, I get it. Bashing microsoft helps people to feel better about themselves. Never mind then.
Gambler is dead on. This isn't a forum for bashing - and I'm the easily the first to get in line to bash Microsoft.

"Microsoft is evil" is a whole seperate topic, and as Jcart said..
Jcart wrote:We've been down this road, and it is an ugly one.. 8)
We've consistently chosen not to do that. Lets continue to be consistent in that choice. Stay on topic, and talk about the exploit itself (and fixes/workarounds), or do not reply, please.

In the meantime, two unofficial patches are available to address the IE issue:

http://www.eweek.com/article2/0,1895,1943687,00.asp
Post Reply