Do you use Internet Explorer 6, 7, 8 or 9? If so, then you might catch a nasty itch since malicious hackers are using those IE browsers "to install the Poison Ivy Trojan—malware that can steal data or take remote control of PCs," the BBC warned. This new zero-day can potentially infect "hundreds of millions" of IE browsers. Read more
Note: this post has been updated. Read more
Well it's March and time for the fifth annual Pwn2Own hacker challenge at CanSecWest security conference. The big surprise is not that IE8 or Safari were shamed on day one, it's that no one took on Chrome and Google's offer to pay an additional $20,000 to the first hacker to crack that browser. Read more
The war between security researchers (particularly from Google) and Microsoft is heating up, again, over an old bug in IE8 that was reportedly disclosed to Microsoft years ago. Once again, it seems like there aren't any good guys looking out for the users. On Friday, Google security researcher Chris Evans, in a fit of frustration over what he said was Microsoft's lack of action, posted a link to proof-of-concept code for the bug to the Full Disclosure mailing list. Read more
One way to get your browser to navigate to an IPv6-capable web site is to simply enter the IPv6 address of the web server into the browser's address bar. IETF RFC 2732, Format for Literal IPv6 Addresses in URL's, which is updated by IETF RFC 3986, Uniform Resource Identifier (URI): Generic Syntax, defines the syntax that should be used when entering an IPv6 address directly. The format typically looks something like http://[2001:db8:100:200::1234]/. Read more
I used to love Firefox. I’m an old Linux user that ran Mozilla on the Red Hat Linux desktop that kept me efficient while I was working for a dot-com before the bust. Back then I had to manage a Windows and Linux network with some AIX thrown in, so being able to run Linux was a life-saver, and having a decent browser like Mozilla didn’t hurt. Read more
Microsoft says that a hole demonstrated at Blackhat EU last week against IE will be patched in June. The demonstration involves the IE XSS Filter and a new way to attack a hole that was disclosed and patched in January (with patch MS10-002). The company also today advised Windows 2000 Server users of a critical hole in Windows Media Services. Read more
Since its launch, Internet Explorer 8 has blocked access to over 560 million sites that it determined were serving malware, or about 3 million blocks per day, said Brandon LeBlanc in a blog post on Friday. However, it is unclear how many of those sites were legitimate, duped into serving malware laced ads, sent to them from their ad network. Read more
Some of you might have seen today's story by Gregg Keizer of our sister publication Computerworld headlined "Hacker busts IE8 on Windows 7 in two minutes" and may have asked the same question I asked.
Two minutes? Read more
About two weeks ago I saw a discussion thread on the GIAC Advisory Board that was entitled, “NSS report on browser security (is IE8 or FF more secure?)”. Intrigued, I flagged the discussion as something to read when I had time. Well… I got around to reading the thread and while the discussion wasn’t the flame war I had hoped, the source for the discussion was interesting enough that I decided to blog about it. Read more
Recently I upgraded to a new laptop running Windows 7 Enterprise and it came with IE8. The Ie8 browser was so incredibly slow it was unusable. However, I found a way to correct the problem. If you are having similar performance issues with IE8 you may find this information helpful for speeding up this bloated browser. Disabling Add-ons and installing the Google Chrome Frame plug-in may help you speed up IE8 to the level of "acceptable". Read more
Microsoft's proposing to use something called a "ballot screen" that would require users chose which browser they would like to use. It's something akin to the default search engine chooser you're presented with the first time IE8 starts up. Great, one more install question we'll get to answer. But is it really fair that IE 8 will come, installed and ready to go with the OS, when other browsers must be downloaded and installed separately. Read more
It was mid last week when I installed the Google plugin for IE8 that replaces the web rendering and JavaScript engine with Google Chrome's WebKit and V8 engine respectively. Since I blogged about this last week, Microsoft's fired back balking because the plugin negates the private browsing feature in IE8 and makes the browser less secure by "running a browser within a browser". Read more
The issue of Google's gutsy move to step in and solve IE8's performance problem is pretty short and sweet from my perspective. If IE8 wasn't such a slow pig of a brower, there wouldn't be an opportunity for Google to fix it by using Google's WebKit display engine. Plain and simple. IE8 was slow when it was in beta and its still SLOW today, one of the worst performing browsers on Windows... still. Read more
In a test of Internet Explorer 8's malware-blocking abilities, IE8 significantly bested the competitors. But then again, Microsoft paid for the test. Read more
Opera Software is, as expected, preening over the expected forthcoming ballot box feature in Windows 7. When European Windows 7 users fire up their machines, the box will ask which browser they would like to install by default. This will put the Opera name in front of millions of users who probably never considered it. But that's not all. Read more
Microsoft will be adding a ballet screen to European versions of Windows 7 that offers users a choice of default browsers, the EU's European Commission has confirmed today. The EC has is also using this case to pressure Microsoft to do more about interoperability overall. It said Microsoft has agreed to do a better job in making third-party software operate on its server products such as Office and Windows Server. Read more
Microsoft offers free Nickelback track for IE8 and debuts commercial featuring a woman throwing up
Are Microsoft's latest tactics to get folks to download Internet Explorer 8 funny, disgusting, obnoxious or effective? On the one hand, you have the rather pleasant idea that if you download a copy of IE8 you get a never-before released track from rocker band Nickelback. On the other, you have an ad campagn that displays a woman throwing up (multiple times). Not pleasant. Read more
Microsoft's Windows Internet Explorer Get the Facts website is just about as truthful as any other campaign that falls somewhere between PR and propaganda. And it's causing the kind of backlash that can't be helpful in increasing the browser's reputation. Hundreds of blog articles refuting the so-called facts have appeared since Microsoft launched the site this week. Read more
It's a bit of a surprise but BetaNews.com is reporting their testing shows Windows 7 RC speeds up browser performance. IE specifically picks up the pace by about 12%. Why is happening? I don't think we know those details. I wonder if Microsoft might have revamped the TCP stack, and if so we should see a speed up in other network applications. Read more