Poasters Computer Forums

Computer Discussion => Software Discussion => Topic started by: saoirse on June 25, 2004, 13:56 hrs

Title: Yet another MSIE security flaw
Post by: saoirse on June 25, 2004, 13:56 hrs
Another serious flaw has been discovered, affecting users of Microsoft Internet Explorer.

There's a high warning with this - IE users are advised not to use the browser until the system has been patched.

More information can be found below.

http://news.bbc.co.uk/1/hi/technology/3840101.stm

http://www.microsoft.com/security/incident/download_ject.mspx (http://www.microsoft.com/security/incident/download_ject.mspx).

saoirse
Title: Re:Yet another MSIE security flaw
Post by: trav on June 25, 2004, 14:51 hrs
Thanks for the heads up, im all patched up now :)
Title: Re:Yet another MSIE security flaw
Post by: iansl on June 25, 2004, 17:12 hrs
I'll apply the patch to my newer PC> I just took a look at Windows Update and it said I didn't need anything. But mucho gracias for de heads up.
Title: Re:Yet another MSIE security flaw
Post by: query on June 25, 2004, 17:49 hrs
Keep your antivirus updated and running, because Microsoft does not yet have a patch released for this flaw.


"The Internet Explorer flaws that enabled the Russian attack, however, affect every user of the Web browser, because Microsoft has not yet released a patch."


http://news.com.com/Web+site+virus+attack+blunted/2100-7349_3-5248279.html?tag=nefd.top (http://news.com.com/Web+site+virus+attack+blunted/2100-7349_3-5248279.html?tag=nefd.top)
Title: Re:Yet another MSIE security flaw
Post by: trav on June 26, 2004, 12:22 hrs
but....but....woah....but...what did i patch up then??

Uh-Oh :o
Title: Re:Yet another MSIE security flaw
Post by: query on June 26, 2004, 14:38 hrs
May have been an older flaw - there is as yet, apparently no patch for the current issue.

Title: Re:Yet another MSIE security flaw
Post by: Mark H on June 26, 2004, 17:08 hrs
Ah, the love of autoupdate every two hours for my AV program.  ;D
Title: Re:Yet another MSIE security flaw
Post by: Whizbang on June 27, 2004, 19:40 hrs
I have a very serious question, if asked in a somewhat whimsical manner.  How many times can you patch up holes in a sock before you need to get a new sock?  Now I know why they refer to Internet connection interface drivers as "Winsocks."   ::)
Title: Re:Yet another MSIE security flaw
Post by: Igloo on June 29, 2004, 12:09 hrs
lucky i run sp2 version 2 ;D
Title: Re:Yet another MSIE security flaw
Post by: query on July 03, 2004, 10:17 hrs
Lucky, until

(a) The hackers find the flaws Microsoft knows about and hasn't fixed, or doesn't know about yet

or

(b) Find the flaws introduced BY SP2, rather than fixed by it.

Until Microsoft radically alters the architecture of Windows (which will largely destroy its main advantage -- ease of use -- it will remain a fundamentally insecure operating system).
Title: Re:Yet another MSIE security flaw
Post by: Igloo on July 03, 2004, 12:18 hrs
suppose, but i have never had a virus on this machine, except when Norton went mad, and ignored the blaster, now, atleast, i am safe :)
Title: Re:Yet another MSIE security flaw
Post by: txsidewinder1 on July 07, 2004, 20:59 hrs
Microsoft will never get it straight. The company they hired to do the downloads for them now has an ad company and is in bed with Doubleclick. A lot of people do not believe me, but this is true. This is a shame because the company enjoyed such good reviews and was hired by many computer companies. Now they have gone over to the dark side.
Title: Re:Yet another MSIE security flaw
Post by: Igloo on July 08, 2004, 14:18 hrs
omg, typical of them  >:( >:( >:( >:(, now more spyawre, just what we need  :'( :'( :'(
Title: Re:Yet another MSIE security flaw
Post by: trav on July 08, 2004, 15:32 hrs
Man, and WHAT FOR???

They, I bet were a great company, why did they make the wrong turn?
Title: Re:Yet another MSIE security flaw
Post by: query on July 08, 2004, 18:17 hrs
Princess Leia to Grand Moff Tarkin in Star Wars:

"The more you tighten your grip, governor, the more star systems will slip though your fingers".

Microsoft has become an empire -- show me an empire in history that has endured?

Title: Re:Yet another MSIE security flaw
Post by: pat on July 08, 2004, 18:29 hrs
Ha, the barbarians are at the gate.
Title: Re:Yet another MSIE security flaw
Post by: query on July 08, 2004, 19:51 hrs
And the Emperor isn't showing much of a fighting spirit -- that is almost eerie.

Or is it that the Emperor has no armor, and that the Dark Side lighning isn't working any longer?

The sad part is that for many businesses and other organizations, there is very little alternative - or if there is, it is a very expensive switch to make.

I don't hold a lot of hope for Microsoft-based computing -- I've seen a daily escalation in the number of worms, viruses, etc., invading our 1200-computer network.

Fortunately, for me at least, in a week or so -- I will be out of information technology (at least by job title) and going back to what I was really trained for, so I'll leave solving those problems to my successor.

Title: Re:Yet another MSIE security flaw
Post by: trav on July 08, 2004, 20:59 hrs
Quote from: query on July 08, 2004, 19:51 hrs

I don't hold a lot of hope for Microsoft-based computing -- I've seen a daily escalation in the number of worms, viruses, etc., invading our 1200-computer network.





That may be true, but, what about, all of those programs that all of those people own on Miscrosoft-based PC's? If they have to switch over to something of a different format, they are going to be pretty mad, that they cant use Windows-based programs...those programs may not be availible for this new operating system.....


For me? I've tried Linux, and its not my favorite, its not easy to use.........


For Microsoft, right now, that would be a good thing, why? Because, most people will use their Operating Systems for ease-of-use.

I dont think that they (MS) will ever stop.
Title: Re:Yet another MSIE security flaw
Post by: iansl on July 09, 2004, 12:28 hrs
Enter Apple...

Or Lindows...

Apple is easy to use. I know that it is just plain wierd for me (a heartty PC user) to say this, but you gotta admit it...

And Lindows...er...Linspire is Linux's stability, security, etc., married to a Windowsish interface, plus it has a comprehensive set of tools you can get for it...

If only they knew, namely Arcsoft (Showbiz, which, along with Photoshop Elements 2, keeps me from ditching Windows, plus the fact that there aren't near enough drivers right now :(), Adobe and the millions of people out there who haven't heard of Lindows or Linux or any other alternative to MS, such as Opera, Firefox, StarOfficde, etc, etc, etc...
Title: Re:Yet another MSIE security flaw
Post by: pat on July 13, 2004, 18:00 hrs
Oops, there goes another one, well five new critical updates.
Better head on over to the windows update site.

Some info;
MS04-023_HTML_HELP (http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=MS04-023_HTML_HELP)
MS04-022_TASK_SCHEDULER (http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=MS04-022_TASK_SCHEDULER)
Title: Re:Yet another MSIE security flaw
Post by: Whizbang on July 13, 2004, 22:20 hrs
Has Microsoft asked Netscape for help yet?   ;)
Title: Re:Yet another MSIE security flaw
Post by: Mark H on July 13, 2004, 23:04 hrs
Quote from: pat on July 13, 2004, 18:00 hrs
Oops, there goes another one, well five new critical updates.
Better head on over to the windows update site.

Some info;
MS04-023_HTML_HELP (http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=MS04-023_HTML_HELP)
MS04-022_TASK_SCHEDULER (http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=MS04-022_TASK_SCHEDULER)


Thanks goodness for broadband! 3.5 gigs of critical updates now installed. Thanks for the information Pat. :)
Title: Re:Yet another MSIE security flaw
Post by: Carskick on July 14, 2004, 03:53 hrs
Quote from: iansl on July 09, 2004, 12:28 hrs
Enter Apple...

Or Lindows...

Apple is easy to use. I know that it is just plain wierd for me (a heartty PC user) to say this, but you gotta admit it...

And Lindows...er...Linspire is Linux's stability, security, etc., married to a Windowsish interface, plus it has a comprehensive set of tools you can get for it...

If only they knew, namely Arcsoft (Showbiz, which, along with Photoshop Elements 2, keeps me from ditching Windows, plus the fact that there aren't near enough drivers right now :(), Adobe and the millions of people out there who haven't heard of Lindows or Linux or any other alternative to MS, such as Opera, Firefox, StarOfficde, etc, etc, etc...

Apples bug me.

My 2 cents.
Title: Re:Yet another MSIE security flaw
Post by: Igloo on July 14, 2004, 15:27 hrs
quick mission over to windows update, and ....suprise surpirse...... nothing but some software updates for my mobo, and my video card (crap thing, but nvm) anyway, thats it :S

Igloo
Title: Re:Yet another MSIE security flaw
Post by: Buffalo2102 on July 14, 2004, 17:33 hrs
Quote


That may be true, but, what about, all of those programs that all of those people own on Miscrosoft-based PC's? If they have to switch over to something of a different format, they are going to be pretty mad, that they cant use Windows-based programs...those programs may not be availible for this new operating system.....


For me? I've tried Linux, and its not my favorite, its not easy to use.........


For Microsoft, right now, that would be a good thing, why? Because, most people will use their Operating Systems for ease-of-use.

I dont think that they (MS) will ever stop.
Quote

Here's an idea.  What if those nice Linux/OS-X/Unix/etc. developers added a "Windows Emulator" to their OS's?  Then you could install Windows apps and select "run in windows XP mode", et voila!
Goodness knows Microsoft have managed it for just about everything else.

Seriously though, many of the applications written for Linux etc. far outshine the Windows equivalents, especially the Office-type ones, and they are pretty much free!  The main problem is, as you say, the operating systems are not that easy to use.  Most people who try it out don't even get as far as installing any additional applications to the OS because they have been frightened off by the set-up of the OS itself.
Title: Re:Yet another MSIE security flaw
Post by: trav on July 15, 2004, 07:11 hrs
Quote from: Buffalo2102 on July 14, 2004, 17:33 hrs
Quote


That may be true, but, what about, all of those programs that all of those people own on Miscrosoft-based PC's? If they have to switch over to something of a different format, they are going to be pretty mad, that they cant use Windows-based programs...those programs may not be availible for this new operating system.....


For me? I've tried Linux, and its not my favorite, its not easy to use.........


For Microsoft, right now, that would be a good thing, why? Because, most people will use their Operating Systems for ease-of-use.

I dont think that they (MS) will ever stop.


Here's an idea.  What if those nice Linux/OS-X/Unix/etc. developers added a "Windows Emulator" to their OS's?  Then you could install Windows apps and select "run in windows XP mode", et voila!
Goodness knows Microsoft have managed it for just about everything else.

Seriously though, many of the applications written for Linux etc. far outshine the Windows equivalents, especially the Office-type ones, and they are pretty much free!  


The main problem is, as you say, the operating systems are not that easy to use.  Most people who try it out don't even get as far as installing any additional applications to the OS because they have been frightened off by the set-up of the OS itself.


Yeah, they've allready tied doing that, even with a DirectX oriented emulator, Wine. Problem: It doesnt work too well, but im sure itll improve :)

I belive that, but there are some applications i can't live without:

Stienberg's WaveLab 4
ATI's Multimedia Center/Driver Suite

Thats also another reason Windows is great
Title: Re:Yet another MSIE security flaw
Post by: iansl on July 17, 2004, 20:13 hrs
For now, since I still use iTunes, Photoshop Elements and Pharoah (a game), I use Windows. Apple is too toylike for me, but I'd do it if the worms get too bad. I would actually get one now, if I had the money. Probably an iBook, to replace the aging laptop that I'm poasting this on. The other OSes, unfortunately, do not have the tools to emulate WIndows to the point where all the apps I use will work in it (but one app that was built for 95 won't work on my sig machine, even in emulation mode; go figure). But I would like to try Lindows, er, Linspire (whatever), as it looks easy to use and has at least some of the tools I need to get through my day.

And I just checked Windows Update, and I'm downloading 15 of the 22 updates for the 98 system I'm poasting this on. Those are 6.9 MB. Thankfully, they don't have any other downloads that need to be 'attached' to them. Buut that is still a big hunk, considering that I'm working at 28.8 kbps.

BTW, does anyone know why NetZero, AOL and TOAST.net (and maybe others) connect significantly slower on W98-based PCs than on XP ones? For example, I can get 41 kbps on toast.net or netzero with my sig pc, but only 21.6 (toast) on my 98 desktop and 28.8 for both ISPs on my laptop (which has a smoking fast modem). It seems that with KTC, a local ISP, this problem wasn't there, but I may've just had a fluke. Mods, move this if you want, but I would like to know if anyone knows.
Title: Re:Yet another MSIE security flaw
Post by: query on July 18, 2004, 05:40 hrs
Sounds like your modem driver for XP is better than the one for DOS is.