Re: Internet Explorer has been hijacked by "About:Blank"

From: Shenan Stanley (news_helper_at_hushmail.com)
Date: 07/29/04


Date: Thu, 29 Jul 2004 16:19:27 -0500

Steve in NC wrote:
> It would seem that the solution is obvious. Why not simply switch to
> a less vulnerable, less bug-riddled browser and abandon IE to the
> hackers it hosts so readily and well?

Because you cannot abandon it completely and although there are "less
vulnerable" browsers out there, they have their issues as well. I have not
found one browser that blocks all popups or all spyware/adware/malware yet -
nor have I found one that can display as many pages as Internet Explorer (as
(unfortunately) many people design around it), nor have any been lacking in
vulnerabilities. As soon as everyone decides on one - that will be the one
getting attacked and showing its true vulnerabilities.

In any case - you suggest it, but you suggested no concrete alternative...
In your ranting would it have been so hard to add:

Try Mozilla Firefox.

-- 
<- Shenan ->
-- 
The information is provided "as is", with no guarantees of
completeness, accuracy or timeliness, and without warranties of any
kind, express or implied.  In other words, read up before you take any
advice - you are the one ultimately responsible for your actions.


Relevant Pages

  • Re: BIND update?
    ... ask to resolve www.google.com, the answer does not mean "www.google.com is on the network at 74.125.19.104." ... Yes, yes, DNS makes no security guarantees, it's always been vulnerable, this is old old news. ... what's at issue is that you're choosing to let unknown and untrusted sites inject arbitrary data into your web browser. ... check old CERT advisories, attackers have been exploiting DNS cache vulnerabilities in home/soho routers/WAPs/firewalls for a while now. ...
    (FreeBSD-Security)
  • Re: Just venting (totally OT)
    ... If you can point out better free anti virus, firewall, anti ... Malware authors write their nasties to exploit vulnerabilities in MS IE ... Using your logic if Opera had many more vulnerabilities than IE the bad guys would write their nasties to exploit Opera instead of focusing on IE even though Opera has a very small % of the browser market. ...
    (uk.people.support.depression)
  • Re: [opensuse] OpenSuse 11
    ... stress-test suite for a browser infrastructure. ... dynamically linked extensions and which has a perfect JavaScript ... It is also the case that many of these vulnerabilities are equally ...
    (SuSE)
  • LevCGI.coms NetPad 1.0.2 multiple vulnerabilities
    ... Levcgi.coms NetPad 1.0.2 Multiple Vulnerabilities Advisory ... Easy to install and use text editor for your web browser! ... Remote Command Execution Exploit: ...
    (Bugtraq)
  • Re: [Full-Disclosure] no more public exploits
    ... too bad you chose to abandon full disclosure. ... vulnerabilities into practical exploits. ...
    (Full-Disclosure)