Teacup, Meet Storm, pt. III: The IE6 Google Attack Flaw
Linked by Thom Holwerda on Mon 18th Jan 2010 22:00 UTC
Internet Explorer Ah, the security vulnerability that was used in the Google attack. It's been around the internet about a million times now, and even governments have started advising people to move away from Internet Explorer. As is usually the case, however, the internet has really blown the vulnerability out of proportion. I'll get right to it: if your machine and/or network has been compromised via this vulnerability, then you most likely had it coming. No sympathy for you.
E-mail Print r 0   · Read More · 68 Comment(s) http://osne.ws/hk4
Thread beginning with comment 404770
To read all comments associated with this story, please click here.
Windows 2000 still can be "fixed" :)
by umccullough on Mon 18th Jan 2010 22:48 UTC
umccullough
Member since:
2006-01-26

By the way, I left Windows 2000 off the chart since it's no longer sold. In case you're curious: yes, IE6 on Windows 2000 is exploitable. Sadly, there's no fix because you can't upgrade to newer versions of IE.


Which simply means users of Windows 2000 must choose a different browser entirely now.

Reply Score: 3

DrillSgt Member since:
2005-12-02

Which simply means users of Windows 2000 must choose a different browser entirely now.


Or upgrade to a modern OS.

Reply Parent Score: 2

Microsoft's answer:
by gustl on Tue 19th Jan 2010 15:15 in reply to "Windows 2000 still can be "fixed" :)"
gustl Member since:
2006-01-19

http://www.techradar.com/news/internet/microsoft-switch-from-ie-and...

In short: Microsoft tells us, that switching to other Browsers would actually increase the risk.

I do not know, how they can possibly arrive at this conclusion. No other major browser has a zero-day exploit on the rampage, and IE is not really fixed yet. The second line of defence prevents the attack from succeeding in Vista, Win7 with EI8, but the flaw is still there.

I know, that in USA you cannot do anything against Microsoft issuing such moronic statements, here in Austria however, if you say "competition is worse than us", you might have to prove this statement in court. If you cannot prove it, you have to pay damages for tarnishing the competitor's reputation.

Reply Parent Score: 3

RE: Microsoft's answer:
by larwilliams2 on Tue 19th Jan 2010 15:48 in reply to "Microsoft's answer:"
larwilliams2 Member since:
2009-12-02

http://www.techradar.com/news/internet/microsoft-switch-from-ie-and...

In short: Microsoft tells us, that switching to other Browsers would actually increase the risk.

I do not know, how they can possibly arrive at this conclusion. No other major browser has a zero-day exploit on the rampage, and IE is not really fixed yet. The second line of defence prevents the attack from succeeding in Vista, Win7 with EI8, but the flaw is still there.

I know, that in USA you cannot do anything against Microsoft issuing such moronic statements, here in Austria however, if you say "competition is worse than us", you might have to prove this statement in court. If you cannot prove it, you have to pay damages for tarnishing the competitor's reputation.


yes, because you can trust a website that has an image caption of "Microsoft: IE8 all this bad publicity" to not mis-quote someone. The fact that part of the quote is missing casts doubt over its accuracy.

Reply Parent Score: 2