Trojan uses MS hole to hijack Web browsers

InfoWorld ^ | 10/02/03 | Paul Roberts

[Salo]

I can't wait until Explorer is secured.

[Salo]

Pinging the Penguin Pinger.

[Support Free Republic]

A Recall AND a Fundraiser? I'm toast.

Let's get this over with FAST. Please contribute!

[Salo]

Not sure if this applies to the Apple version of Explorer.

[TruthShallSetYouFree]

Trojan uses MS hole to hijack Web browsers

A Trojan with a hole was responsible for at least one of my kids.

[Salo]

I'm *so* glad I don't have to patch *that* hole......

A Trojan with a hole was responsible for at least one of my kids.

[thoughtomator]

Explorer will be secured when pigs fly. It's own construction forbids serious security - you could not have reliable security without changing the program entirely. Microsoft needs to re-code the browser from scratch, with security replacing OS integration as a priority.

[HuntsvilleTxVeteran]

Trojan uses MS hole

I have a dirty mind!

[The_Victor]

There was a "FReeper help" thread yesterday (I think) from someone with this problem. Anyone remember who, I can't find the thread.

[MrLee]

Nope. Apple's cool!!!

[flashbunny]

Hah! Good one!

I actually prefer IE's page rendering features, though I haven't really given much time to netscape's latest offering. But the only way I'll browse is by setting activex controls to 'prompt' instead of 'always run'. It's a pain in the butt, but I don't trust MS security inside of IE.

[tubavil]

even machines that applied that patch are vulnerable to the latest attack because of holes in that security patch

'blows is a total pos.

[steplock]

**IF** apple - linux - xenix - etc were the MOST POPULAR programs and MS was HARDLY EVER used ....

.... then you would see all these "flaws" in the other programs/systems.

A hacker is NOT going to waste his time on a second rate machine/program that very few people could even care for.

If someone came up with "Extreme Virus affect Commodore-64 Computers" WHO WOULD CARE? Only the C-64 users (YES! There still are some out there!)

[JoJo Gunn]

Trojan uses MS hole to hijack Web browsers Program changes DNS so that requests for popular sites bring visitors to one maintained by hacker instead.

They must be talking about Verisign.

[MD_Willington_1976]

hehe...was waiting for that one...

[Salo]

So doesn't that mean MS should be even more cautious? BTW, it's not a "flaw" - it's a real-deal security hole. Again.

**IF** apple - linux - xenix - etc were the MOST POPULAR programs and MS was HARDLY EVER used then you would see all these "flaws" in the other programs/systems

[TruthShallSetYouFree]

Glad you smiled. Was expecting condomnation.

[libravoter]

A hacker is NOT going to waste his time on a second rate machine/program that very few people could even care for.

It comes down to this: Microsoft has worked very hard to ensure its monopoly.

The problem is, in the computer world, a monopoly is the equivelent of the Dutch Elm. Does anyone remember Dutch Elms? They were the perfect tree . . did well no matter where they were planted, and they were planted all over cities and suburbs across America.

Then one day Dutch Elm disease came. And since Dutch Elms were everywhere, the disease spread quickly. And since there weren't a lot of trees in many places that weren'tDutch Elms, there were many many towns that suddenly had all their trees die.

Whether Windows is a great or horrid operating system is beyond the point. Hackers want their viruses going everywhere as quickly as possible. Since there is no OS diversity, they can accomplish this easily. Therefore, the Microsoft monopoly is a threat to America's computer infrastructure.

[libravoter]

**IF** apple - linux - xenix - etc were the MOST POPULAR programs and MS was HARDLY EVER used then you would see all these "flaws" in the other programs/systems

If you had Apple AND Linux AND Xenix all competing as major players as opposed to JUST Microsoft, no one person would be able exploit a "flaw" on so many machines at once.

[sigSEGV]

Latest news is that software maker Valve, who made the game Half-life, had the entire source code to Half-life 2 ripped off due to this exploit. Don't ask me why they would be so stupid as to use Outlook.