Teacup, Meet Storm, pt. III: The IE6 Google Attack Flaw
Linked by Thom Holwerda on Mon 18th Jan 2010 22:00 UTC
Internet Explorer Ah, the security vulnerability that was used in the Google attack. It's been around the internet about a million times now, and even governments have started advising people to move away from Internet Explorer. As is usually the case, however, the internet has really blown the vulnerability out of proportion. I'll get right to it: if your machine and/or network has been compromised via this vulnerability, then you most likely had it coming. No sympathy for you.
E-mail Print r 0   · Read More · 68 Comment(s) http://osne.ws/hk4
Thread beginning with comment 404797
To view parent comment, click here.
To read all comments associated with this story, please click here.
kragil
Member since:
2006-01-04

No use telling him. Judging by this write up he is on MS payroll.

First of all IE6 is still officially supported by MS. People are still paying to get security patches and so it is not the fault of the users when they get hacked.

So:
_It is Microsofts fault._

2. The exploit works on IE7 on XP and Vista (not all setups, but still)

3. This article makes it sound like the good advancements in Vista regarding security cure all potential holes.

_They do not._

In conclusion:
This thing needs updates or should be deleted. Security is serious stuff for experts to write about.

Reply Parent Score: 0

Thom_Holwerda Member since:
2005-06-29

Ah, the "I disagree so he must be paid by Microsoft argument".

Very convincing argument. Cicero would be proud.

Seriously now - it's fine you disagree with me, but at least try to do so in a constructive manner (like Kroc did), because people aren't going to take you seriously this way. Your dislike for all things MS is clear enough without childish stuff like this.

Reply Parent Score: 2

kragil Member since:
2006-01-04

Well sorry, but if you use MS "get the facts"-like marketing material, which is obviously wrong and even enrich it with your pro-MS spins I will say what that looks like. (And I don't really think MS is paying you, but it sure looks that way.)

And my bias towards open solution is no secret.

Reply Parent Score: 2

Read more of this thread... >
Bill Shooter of Bul Member since:
2006-07-14

Yeah the parent is being slightly jerky by suggesting you're a MS lacky, but he's also got a bit of a point. We've only been talking about Buffer overflows and protection against them. Its an unfounded and unwarented leap from that to

In any case, the outstanding security track record of Windows Vista and Windows 7 remains largly untarnished. I never thought I'd say this, but hats off to the Windows team for (finally) delivering solid, secure products.


There are exploits for Vista. There have been security vulnerabilities. Is MS security improving? Yes, it finally is improving. Is it perfect, no its not. While you didn't explicitly say that its perfect. Saying its secure is pretty much the same thing in a lot of people's books.

It is always wise for security experts to be cautious in their statements concerning security. What was secure yesterday is no longer secure today. What is secure today, may not be tomorrow.

Reply Parent Score: 2

nt_jerkface Member since:
2009-08-26

People are still paying to get security patches and so it is not the fault of the users when they get hacked.


They are when they are told by the company that they are putting themselves at risk when they use IE6 to surf the web.

Who doesn't know that IE6 is a massive security risk? Google should have been the last company to be compromised by something like. Don't make excuses for cheapskate companies.

Reply Parent Score: 2

Cody Evans Member since:
2009-08-14

I think the Mozilla Foundation would be even less likely to be comprimised by IE6...

Reply Parent Score: 1