Archives
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
- July 2006
- June 2006
- May 2006
- April 2006
- March 2006
- January 2006
- December 2005
- November 2005
- September 2005
- August 2005
- July 2005
- June 2005
- May 2005
- April 2005
- March 2005
- January 2005
- December 2004
- October 2004
- September 2004
- January 2004
- December 2003
- October 2003
- June 2003
- January 2003
- December 2002
- June 2002
- January 2002
- January 2001
- May 2000
- April 2000
Categories
Meta
Monthly Archives: January 2010
Bizarre Browser Advice: Abandon Internet Explorer!
Last week the German government warned web users to ditch Internet Explorer and go with some alternative (Firefox, Google Chrome or Safari being the obvious choices).
Why?
As far as I can tell there is a fairly vicious exploit out there which preys on IE version 6.0. It uses an invalid pointer reference to allow it to remotely execute code and hence place a trojan on your PC to steal your information. Microsoft has released Security Advisory #979352, which you can read about here.
The problem only impacts customers using IE6 and while that may still be around 20% of web users, IE7 and IE8 are not vulnerable to this exploit. And even so, to get infected you have to visit a rogue web site with the exploit embedded in it. There are emails in circulation that try to provoke you into doing that. So the risk is there, but it’s not particularly high.
It has to be said that it is not Microsoft’s fault that IE6 users have not upgraded. Many people like myself, who build web sites, gave up trying to accommodate IE6 quite a while ago. It was a bad non-standard release that often generates rendering problems for CSS coders. Microsoft fixed that and moved on. IE6 security was poor as this latest exploit demonstrates. Microsoft will surely produce a fix in time, but Microsoft recommends upgrading or setting Internet zone security in IE6 to high.
So why did the German government suddenly recommend to its citizens to drop this software product?
Even more bizarrely, this morning France has piled in and advised its citizens to drop IE too. Certa, a French government agency that oversees cyber threats, warned against using all versions of the web browser.
What is behind this?
I can only presume that European governments have been spooked by the Chinese attacks on Google and believe that they have to be proactive in order to protect their economies and citizens. However neither government has explained what is wrong with IE7 or IE8. IE8 was designed for security and Microsoft claims that it is the most secure of the browsers.
My advice, until someone demonstrates otherwise is that IE8 is safe, so upgrade unless you were wanting to change browsers anyway.
If a serious vulnerability suddenly emerges in Firefox or Safari, are the French and German governments going to advise you to switch browsers again?
A Gradual Emigration
As I remarked a while back, I’m gradually moving much of the content of this site to The Virtual Circle, which is going to be a more organized repository of writings. Here, I’ll just write a blog – which means no analysis but comments on this, that and the other – and breaking IT news.
I’ve done my 10 Predictions for the coming year and I’ve finally finished all my Xmas Words You Don’t know, which I amused myself with over Christmas. Here’s the full list, with meanings, in case you don’t want to read the associated posting.
#1 Hwoelor-tid; Yule tide (a Norse alternative)
#2 Brumalia; The Roman Winter Solstice feast.
#3 Protomartyr; The first Christian martyr in a country
#4 Dulocracy; Givernment by slaves
#5 Pohutukawa; The New Zealand Christmas tree.
#6 Hagiolatry; The worship od saints.
#7 Sinterklaas; Santa Claus
#8 Prolicide; The murder of your sons.
#9 Apophoret; An end of year gift.
#10 Kenosis; The manifestation of God as man#
11 Psilanthropy; The belief that Jesus was just a man.
#12 Parepochism; Errors in assigning dates to historical events.
Posted in A Day In The Life
Leave a comment
Google's Nexus One Error
I had a long discussion yesterday about Google’s phone that kicked the ball up and down the street. It concluded in an agreement that the Google phone is a mistake. Here’s the rationale:
Google should bury the phone and do what it does best. It should forget about Chrome OS devices too.
Having said that: Kudos to Google for standing up to the Chinese.