Post a Comment
If users can add websites to the list and they get added in within the hour, then I'm assuming that they don't review the URL very well...
Maybe we should add http://www.microsoft.com to the IE black list 
Impressive for IE.
However, resisting the tempting click on a "too-good-to-be-true" offer and having minimal user privileges/rights (i.e. no install possible) while browsing would go a long way to minimize threats when using the other browsers.
What is a bit scary with the presence of black and white lists of urls in the cloud, and an absolute reliance on them for protection, is the possibility that a highly determined/motivated individual/group would break into the system and manipulate the lists to their advantage. Also, one could think of a concerted attack on the entire system - akin to a D.O.S. - preventing the communication of the updates of the lists to the users in within a reasonable time frame.
What may even be more scary is that this kind of published results will allow IE to keep its hold as the IT-blessed browser in the corporate world which is generally paranoid about security.
Of course, it's advertising lingo only, but I have to contradict nevertheless:
No, the best choice when it comes to catching attacks aimed at making the user download Web-based malware unquestionably is using an OS that doesn't collude with IE.



