Digital Spy

Search Digital Spy
 

DS Forums

 
 

Another Zero day IE flaws.


Reply
Thread Tools Search this Thread
Old 05-10-2013, 20:37
alanwarwic
Forum Member
 
Join Date: Oct 2003
Location: Researchington
Posts: 24,588

http://www.theregister.co.uk/2013/10..._0day_fix_due/

This one has been out there quite a while so a very unlucky few of you may well be botnets by now.

It was discovered being exploited August but could well have been used selectively for far longer.
alanwarwic is offline   Reply With Quote
Please sign in or register to remove this advertisement.
Old 05-10-2013, 21:48
alanwarwic
Forum Member
 
Join Date: Oct 2003
Location: Researchington
Posts: 24,588
I was going to say 'IE zero day flaws' but realised it was still the very same one still awaiting an emergency fix.
alanwarwic is offline   Reply With Quote
Old 06-10-2013, 14:59
shhftw
Forum Member
 
Join Date: Feb 2011
Location: Yorkshire
Posts: 1,825
I was going to say 'IE zero day flaws' but realised it was still the very same one still awaiting an emergency fix.
There's a FixIt (51001)
shhftw is offline   Reply With Quote
Old 06-10-2013, 16:36
alanwarwic
Forum Member
 
Join Date: Oct 2003
Location: Researchington
Posts: 24,588
There's a FixIt (51001)
I don't really use IE so never bothered.

Most people only get to see/choose that busy Patch Tuesday.
alanwarwic is offline   Reply With Quote
Old 09-10-2013, 17:48
alanwarwic
Forum Member
 
Join Date: Oct 2003
Location: Researchington
Posts: 24,588
http://www.theregister.co.uk/2013/10...le_ie_trouble/

Maybe I was right. Two Zero day fixes!
alanwarwic is offline   Reply With Quote
Old 09-10-2013, 18:03
LION8TIGER
Forum Member
 
Join Date: May 2005
Posts: 7,357
Windows update is not working for me, just stays on looking for updates.
LION8TIGER is offline   Reply With Quote
Old 09-10-2013, 18:36
squack
Forum Member
 
Join Date: Nov 2004
Location: Pembrokeshire, Wales
Posts: 585
Windows update is not working for me, just stays on looking for updates.
Worked "fine" for me, I got 43 updates . That must be the biggest patch Tuesday that I can ever recall.
squack is offline   Reply With Quote
Old 09-10-2013, 18:44
flagpole
Inactive Member
 
Join Date: Jan 2003
Posts: 43,524
Windows update is not working for me, just stays on looking for updates.
Weren't working for me either. Came on may be the 5th go.

Also restarted during the restart.
flagpole is offline   Reply With Quote
Old 09-10-2013, 20:26
LION8TIGER
Forum Member
 
Join Date: May 2005
Posts: 7,357
All done, I got 11 initially and another one after a restart (XP).
It took a good while to download and install them.
LION8TIGER is offline   Reply With Quote
Old 11-11-2013, 09:30
alanwarwic
Forum Member
 
Join Date: Oct 2003
Location: Researchington
Posts: 24,588
http://news.cnet.com/8301-1009_3-576...ive-by-attack/

Another one that I think has been around a while now. I would also assume that both the zero day Office flaw and this gets fixed patch Tuesday.
alanwarwic is offline   Reply With Quote
Old 11-11-2013, 10:04
zx50
Forum Member
 
Join Date: Dec 2004
Location: Next to Consett.
Posts: 66,051
Well, I'll be okay. I only use Internet Explorer the odd time.
zx50 is offline   Reply With Quote
Old 11-11-2013, 11:10
cnbcwatcher
Forum Member
 
Join Date: Sep 2008
Location: At college, in L.A.'s office
Posts: 50,799
Nobody in my house uses IE. It's all Firefox or Chrome, even on my Macs.
cnbcwatcher is online now Follow this poster on Twitter   Reply With Quote
Old 11-11-2013, 11:16
Stig
Forum Member
 
Join Date: Sep 2003
Location: Sandy Heath, Beds, UK
Posts: 6,849
Of course, Chrome and Firefox have no vulnerabilities at all, because we never hear about them...
Stig is offline   Reply With Quote
Old 11-11-2013, 11:33
alanwarwic
Forum Member
 
Join Date: Oct 2003
Location: Researchington
Posts: 24,588
Well Safari and Chrome are very much open source.

With anyone allowed to and 1000's of people probably already messing about with the source code we would certainly hear about them.

That is if any still exist.
alanwarwic is offline   Reply With Quote
Old 11-11-2013, 12:59
alan1302
Forum Member
 
Join Date: Jul 2008
Location: West Yorks
Posts: 5,778
Well Safari and Chrome are very much open source.

With anyone allowed to and 1000's of people probably already messing about with the source code we would certainly hear about them.

That is if any still exist.
I'd be more surprised if they didn't exist
alan1302 is offline   Reply With Quote
Old 11-11-2013, 13:24
NewWorldMan
Forum Member
 
Join Date: Jul 2009
Posts: 2,439
All the browsers have regular security vulnerabilities. It's just that the likes of Firefox and Chrome patch them more quickly.
NewWorldMan is offline   Reply With Quote
Old 11-11-2013, 13:47
cnbcwatcher
Forum Member
 
Join Date: Sep 2008
Location: At college, in L.A.'s office
Posts: 50,799
Of course, Chrome and Firefox have no vulnerabilities at all, because we never hear about them...
I've never heard of any in either browser. A new version of Firefox is released every 6 weeks and I presume new versions of Chrome are released fairly often as well. Remember FF is open source, IE is not and never will be because of the Microsoft Monopoly
cnbcwatcher is online now Follow this poster on Twitter   Reply With Quote
Old 11-11-2013, 19:22
alan1302
Forum Member
 
Join Date: Jul 2008
Location: West Yorks
Posts: 5,778
Remember FF is open source, IE is not and never will be because of the Microsoft Monopoly
Is that bad?

Just because something is open source does not instantly make it good.
alan1302 is offline   Reply With Quote
Old 11-11-2013, 19:44
cnbcwatcher
Forum Member
 
Join Date: Sep 2008
Location: At college, in L.A.'s office
Posts: 50,799
Is that bad?

Just because something is open source does not instantly make it good.
The Microsoft Monopoly is. Look how Netscape Navigator was pushed out of the market in the late 90s because of it. IE was basically forced on users. I've read the cases as I studied antitrust law last year and had to read them and it's quite frankly outrageous.
cnbcwatcher is online now Follow this poster on Twitter   Reply With Quote
Old 11-11-2013, 19:45
squack
Forum Member
 
Join Date: Nov 2004
Location: Pembrokeshire, Wales
Posts: 585
Is that bad?

Just because something is open source does not instantly make it good.
Swings and roundabouts

Open source means that someone can trawl the code to find a bug to exploit.

It also means that someone can trawl the code and flag and suggest a fix for the very same bug.

Fastest wins

Or is it transparency that people like, MS bugs get reported on El Reg or the BBC, Firefox and Chrome bugs get reported on their own bug forums. Who reads those? I know I don't.
squack is offline   Reply With Quote
Old 11-11-2013, 19:50
alan1302
Forum Member
 
Join Date: Jul 2008
Location: West Yorks
Posts: 5,778
The Microsoft Monopoly is. Look how Netscape Navigator was pushed out of the market in the late 90s because of it. IE was basically forced on users. I've read the cases as I studied antitrust law last year and had to read them and it's quite frankly outrageous.
Good business practice for MS though - and most other companies would do the same...Google do it now with Chrome
alan1302 is offline   Reply With Quote
Old 11-11-2013, 19:51
alan1302
Forum Member
 
Join Date: Jul 2008
Location: West Yorks
Posts: 5,778

Or is it transparency that people like, MS bugs get reported on El Reg or the BBC, Firefox and Chrome bugs get reported on their own bug forums. Who reads those? I know I don't.
I'm sure MS have ways to get lists of bugs
alan1302 is offline   Reply With Quote
Old 11-11-2013, 20:02
squack
Forum Member
 
Join Date: Nov 2004
Location: Pembrokeshire, Wales
Posts: 585
The Microsoft Monopoly is. Look how Netscape Navigator was pushed out of the market in the late 90s because of it. IE was basically forced on users. I've read the cases as I studied antitrust law last year and had to read them and it's quite frankly outrageous.
I'd be interested in your sources for that. I was about in the 90's and used Netscape in Win 3 but only because it didn't contain TCP/IP support in the stack and IE didn't exist yet!!

The inclusion of a web browser in Win 3.11/Win95 made everything so much easier, standardised (yes, standards from MS) internet protocols and an in-built web browser allowed the (small) masses to access the web.

The browser wars were all about standards, in those days the W3C didn't exist and MS were fighting with Netscape over HTML elements. That was only fixed later and unfortunately IE won as it ended up with the larger install base and web developers wrote for it, to the detriment of the (only) other browser.

I'm still skeptical about the anti-trust elements that people are still spouting after all this time. Users (and web developers) voted with their feet - IE was the browser that won and because of the battle the W3C was made to standardise mark-up languages, which must be a good thing.

Thankfully MS now have to support standards instead of (re-)writing their own. Unfortunately XHTML 'transitional' has to exist to support depreciated tags in IE and Firefox, but we're getting there .

ETA: I remember adding small graphics on the index page "Best viewed using Internet Explorer (or another browser) with an 800 x 600 screen" that linked to the download page for the browser. Thankfully those days are over.
squack is offline   Reply With Quote
Old 11-11-2013, 20:10
squack
Forum Member
 
Join Date: Nov 2004
Location: Pembrokeshire, Wales
Posts: 585
I'm sure MS have ways to get lists of bugs
And I'm sure they have too

It seems the popular press would rather report on bugs in Internet Explorer though as the bugs that are reported daily and publicly on the forums for Firefox and Chrome don't seem to make the news that most people follow.

I'm not defending IE, no software is perfect. It just seems to me as an easy target and any issues get sensationalised which only serves to give the detractors ammunition.
squack is offline   Reply With Quote
Old 11-11-2013, 21:31
alanwarwic
Forum Member
 
Join Date: Oct 2003
Location: Researchington
Posts: 24,588
...I'm not defending IE, no software is perfect. It just seems to me as an easy target...
There have been zero day Chrome flaws as Pwnium competition winners.
I'd also say that flaws are sometimes there for the use of government security services, and maybe rightly so.
alanwarwic is offline   Reply With Quote
 
Reply



Thread Tools Search this Thread
Search this Thread:

Advanced Search

 
Forum Jump


All times are GMT +1. The time now is 17:28.