Microsoft won't fix Internet Explorer zero-day

iTnews (AUS) ^ | Jun 24, 2015 9:27 AM (AUS) | Allie Coyne, Juha Saarinen

[Utilizer]

HP researchers have published details and proof-of-concept exploit code for a number of zero-day vulnerabilities in Microsoft's Internet Explorer web browser which allow attackers to bypass a key exploit mitigation.

The researchers - part of HP's zero-day initiative team - have a policy to only disclose details of bugs reported to vendors after patches are issued.

But the team decided to go public after being informed by Microsoft that it did not intend to fix the bugs as the company feels the vulnerabilities don't affect enough users.

The flaws were serious enough, however, for Microsoft to earlier award the HP team a US$125,000 bug bounty.

[mabarker1]

[Utilizer]

Along the lines of easily-hacked items.

[Utilizer]

I believe that is microsoft’s position on most exploits as well, until they are forced to deal with it. User error, not microsoft product failure.

[867V309]

Along the lines of easily-hacked items.

HotMail? I don't doubt it, though I never touch the stuff.

[867V309]

I believe that is microsoft’s position on most exploits as well, until they are forced to deal with it. User error, not microsoft product failure.

I understand your thinking. But, given that I have seen the "people of walmart" pictures and know they mostly have windows computers, I'm inclined to cut MS a little slack.

[Dalberg-Acton]

[Utilizer]

That’s only because Apple charges two to four times as much for similar computers, and the “people of walmart” go for the cheapest computers they can get -which means by default a preloaded ‘doze machine since all manufacturers do preload it.

Surprisingly enough (/sarc) trying to find a pc without the ‘doze OS preinstalled is almost impossible and for some reason raises the price on the machines.

Plus, even though ms charges 125 dollars US for each and every version of their OS you wish to purchase and install yourself, with a preloaded machine if you uninstall it and go with a REAL OS like a BSD or ‘nix variant, the most they will offer you if you attempt to send them back their useless and unwanted OS is about ten to twenty dollars back. IF you can overcome their reluctance to do so.

Thus the prevalence of so many ‘doze boxen.

[upchuck]

Firefox and NoScript are the bomb.

Agreed. Add Ghostery and AdBlocker Plus for extra protection and convenience. Web of Trust also helps.

[867V309]

Can’t fool me. That’s an apple queer.

[dayglored]

Microsoft "feels the vulnerabilities don't affect enough users" WTF ... PING!

You can find all the Windows Ping list threads with FR search: search on keyword "windowspinglist".

A big tip o' the "WTF?" Hat to Swordmaker for the ping!!

[Dalberg-Acton]

What gave it away, the yogurt or the water bottle half full of urine?

[867V309]

What gave it away, the yogurt or the water bottle half full of urine?

That, and the menthol fags.

[867V309]

A big tip o' the "WTF?" Hat to Swordmaker for the ping!!

Always happy to see Swordswallower's minions join the fray! They should be Fabulous! with joy today.

BTW, I don't read freakoid fanboi Swordswallower's posts anymore.

[dayglored]

No reason for you to come off like that. I’m nobody’s minion. I run the Windows list. This thread is of interest to Windows users. You got a problem with that, talk it over with Steve Ballmer.

On second thought, given your apparent antipathy for non-Microsoft stuff, maybe you -are- Steve Ballmer... :-)

You want on the Windows list? You’re welcome...

[Boogieman]

It’s that thing you use to download Firefox or whatever when you buy a new pc.

[867V309]

No reason for you to come off like that

Nothing personal, but pinging a squad of swordswallower bots? Please.

[dayglored]

You misunderstand the ping lists.

Swordmaker has the Mac/Apple ping list. He’s run that for many years, letting Apple fans know about threads of interest to them.

I started the Windows ping list a while ago for Windows users and fans. Obviously there’s some overlap from time to time with the Apple list or ShadowAce’s Tech ping list which has a lot of Linux fans, so we often give a heads-up to each other.

But we don’t ping each other’s lists.

Got it?

[867V309]

You misunderstand the ping lists...But we don’t ping each other’s lists. Got it?

To: Swordmaker; Abby4116; afraidfortherepublic; aft_lizard; AF_Blue; Alas Babylon!; amigatec; ...

A big tip o' the "WTF?" Hat to Swordmaker for the ping!!


You're a liar.

Got it?

[dayglored]

> You’re a liar. Got it?

And you’re an ass. Try reading. I replied to Swordmaker’s comment, hence his name at the front of MY WINDOWS LIST.

NOT THE APPLE LIST. Geez. Are you drunk or just illiterate?

Never mind my offer to join the Windows list.

[867V309]

I don't have access to ping lists.

"To: Swordmaker; Abby4116; afraidfortherepublic; aft_lizard; AF_Blue; Alas Babylon!; amigatec; ...
A big tip o' the "WTF?" Hat to Swordmaker for the ping!!"

led me to think it was an apple list; if it wasn't, I apologize for calling you a liar. Sorry. An honest mistake.