Avast WEBforum

Other => General Topics => Topic started by: polonus on November 10, 2008, 07:22:51 PM

Title: IBM: Avoid using Internet Explorer browser!
Post by: polonus on November 10, 2008, 07:22:51 PM
Hi malware fighters,

IBM: Avoid using Internet Explorer

No longer the Operational System, but unpatched browsers and additional plugins
are the main reason many users get malware infected.
Especially PDF-files are the vector of choice to perform attacks.
Most hacker toolkits have several PDF exploits,
like is demonstrated in this video by IBM: http://blogs.iss.net/archive/MaliciousPDF.html
 "Because of the ease and the interaction,
infecting a system through the browser and
active browser plugins has increased manyfold",
according to Internet Security System's John Kuhn, Security System is IBM's security branch.

He does not expect a secure browser to appear for a long time.
"But using a browser without using ActiveX
will enhance security drastically."
Kuhn is fearful that because of the financial crisis a lot of IT people will
seek to earn some additional fees through malicious websites,

polonus
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: YoKenny on November 10, 2008, 09:25:19 PM
http://redwing.hutman.net/~mreed/warriorshtm/klaxon.htm
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on November 10, 2008, 11:27:17 PM
Well this is the kind of  reaction you can expect for just passing such a link, it stirs up controversy, where in real terms it is an overall general browser story. Because of what the user experience should be, browsers are not being developed especially with security in mind.
ActiveX and BHO's were a misconception from the word go, no two ways about it. PDF handling inside a browser as with Adobe is insecure, PDF Download, other than inside a browser is better.
And Microsoft itself states that the OS is not at the culprit of infection, the browser is, and third party software are, and that because of developers.
Why do I use NoScript inside Firefox? Because it protects me. Why do I pre-scan hyperlinks? Because there are malware ridden sites around, etc. etc.,

polonus
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: Avastfan1 on November 11, 2008, 09:52:51 AM
Hello Polonus,

How do you pre-scan hyperlinks? What program/software/website do you use?

Thanks for providing all the great anti-malware information it really is very helpful indeed!

I also use Noscript within Firefox, here's my setup and I would be very keen for any comments, suggestions or criticism!

Thanks in advance,

Avastfan1

My Setup:
- Windows XP SP3 fully patched
- Avast Pro 4.8.1229
- ZoneAlarm Pro 8.0.059.000
- Firefox 3.0.3 (ONLY use Shiternet Explorer for M$ Window$ Update)
- Adblock Plus 0.7.5.5
- NoScript 1.8.4.1
- McAffee SiteAdvisor Plugin 26.6
- Malwarebytes' Anti-Malware 1.30 (not-resident used only on demand)
- A-squared 3.5.0.27 (not-resident used only on demand)
- AVG Anti-spyware  (not-resident used only on demand)
- Hijackthis (useful to evaluate a log occasionally)
- Lavasoft Ad-Aware (not-resident used only on demand)
- Spybot 1.6.30  (not-resident used only on demand)
- SUPERAntiSpyware 4.15.1000  (not-resident used only on demand)
- F-Secure Blacklight  (not-resident used only on demand)
- Rootalyzer  (not-resident used only on demand)
- Java Runtime SE 6 Update 10
- Adobe Flash Player 10.0.12.36
- Adobe Shockwave Player 11.0.3.470
- Foxit Reader 2.3
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on November 11, 2008, 08:30:33 PM
Hi avastfan1,

In Firefox you can use the search engine scandoo.com. This will give you a clue as the security of the search links. For scanning in realtime hyperlinks against malware use this add-on: https://addons.mozilla.org/en-US/firefox/addon/938 The hyperlink can be checked against Dr.Web anti-virus link checker via this Firefox add-on, use it. If something found, do not click period, and then check here: http://linkscanner.explabs.com/linkscanner/default.aspx
I also have this installed and like it better than MacAfee Site-Advisor or WOT, finjan for firefox Secure browsing: https://addons.mozilla.org/en-US/firefox/addon/4892
As the browser is becoming the malware vector of choice, in-browser additional security is what we all depend upon for a more secure Internet experience,

greets,

polonus

Nice set-up you have there, check on it with Secunia PSI (RC4) that addresses all your insecure software on your computer, and what you can do to get a latest version or patch: http://secunia.com/PSISetup.exe
Have it sitting there next to your firewall and it keeps an eye on all your critical software whether it has the latest versions and patches,

Damian
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: CharleyO on November 11, 2008, 08:33:59 PM
***

I've been using ScanDoo since it was first mentioned on this forum and it works very well for this purpose.


***
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on November 11, 2008, 08:46:37 PM
Hi CharleyO,

Yes and you can add scandoo.com to your search engines in Firefox or Flock, Scandoo is designed to give you advanced warning – before you click – by scanning content in real-time. In addition we continually update our ratings based on your feedback and rely on our community of users to help protect each other.
And the search results are Google's, finjan is doing something similar: finjan SecureBrowsing accesses each of the URLs in its current form on the web, and scans the relevant pages in real time using Finjan's patented behavior-based technology. Finjan SecureBrowsing then displays a safety rating next to each link it has scanned. So together with Dr.Web's av hyperlink checker there is actually no excuse going to a malware link or it must be a zero day of the worst sort, so also use the resources in between the keyboard and the computer. And you CharleyO, thanks for reporting your positive experiences,

polonus

Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: CharleyO on November 12, 2008, 08:53:07 AM
***

No problem Polonus -

In fact, I not only check links through ScanDoo, but I also do all my searches through ScanDoo/google so that any bad links will be visible. I do a lot of searching to find helpful information while at this forum and some of the things I search for could easily lead me to bad links. Thanks to ScanDoo, I can avoid these bad links.


***
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: Avastfan1 on November 12, 2008, 11:17:21 PM
Hi Polonus,

Thanks so much for the detailed reply!

Does the Finjan plug-in work properly if you have Noscript set to block google.com?

I downloaded and installed the Finjan plug-in however when I do a google search the little icons next to the left of each search result just 'spin' around like a wheel.

I set Noscript to allow google.com and they all appeared correctly as ticks.

I would prefer not to allow google.com as I think this contains google analytics.....

The Dr. Web plug-in is working fine and I shall have a look at the Secunia program tomorrow.

Thanks again for the information, I keenly await your expert advice with the Finjan question :)

Best wishes,

Avastfan1
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on November 14, 2008, 01:43:00 PM
With NoScript you can both allow google.com and deny googleanalytics for the search results place. NoScript is so versatile it allows you to do this. I always leave NoScript on and allow google.com temporarily if I want further functionality per page (in case I know the place, been there and know it is secure to do so). For other content I do it with a douible click on the NoScript icon in case for Flash content or playing a video (if you want so you can pre-scan the links before doing this with DrWeb's plug-in).
If you are using Firefox, CustomizeGoogle extension lets you block all Google Analytics cookies, on any website. Using this feature makes you more anonymous. But your visit on a single webpage can still be logged in case you allow googleanalytics through NoScript, and why should you?) This way, both Google and the owner of the website knows that someone visited a webpage, but it's difficult to track all pages you're visiting.

Hope this answers your question,

polonus
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: safetynut on November 19, 2008, 09:32:52 PM
I have tried to avoid using IE and use Firefox instead. However, the only way to get Windows OS updated is via IE, so I have to use it for that if nothing else.

But recently I’ve been in IE more than I wanted because I’ve been trying to get info on updates for both Windows OS and Office 2003 that keep failing to install after they’re downloaded. (Is it just me, or is trying to find info on Microsoft’s website like being caught in one gigantic KB loop??)

Anyway, how can you avoid IE if you must get Windows OS updates and Office updates?
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: safetynut on November 20, 2008, 04:19:31 AM
Does anyone know how to avoid using IE if you need to get Windows and Office updates?

Thanks.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: bob3160 on November 20, 2008, 03:31:38 PM
Most of the time, it isn't the browser you use but where you browse that get you in trouble.
I use a combination of browsers including Internet Explorer, Firefox, and Chrome without
any problems or worries of getting infected.  :)

Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: twl845 on November 23, 2008, 02:03:20 AM
Hello Polonus,

How do you pre-scan hyperlinks? What program/software/website do you use?

Thanks for providing all the great anti-malware information it really is very helpful indeed!

I also use Noscript within Firefox, here's my setup and I would be very keen for any comments, suggestions or criticism!

Thanks in advance,

Avastfan1

My Setup:
- Windows XP SP3 fully patched
- Avast Pro 4.8.1229
- ZoneAlarm Pro 8.0.059.000
- Firefox 3.0.3 (ONLY use Shiternet Explorer for M$ Window$ Update)
- Adblock Plus 0.7.5.5
- NoScript 1.8.4.1
- McAffee SiteAdvisor Plugin 26.6
- Malwarebytes' Anti-Malware 1.30 (not-resident used only on demand)
- A-squared 3.5.0.27 (not-resident used only on demand)
- AVG Anti-spyware  (not-resident used only on demand)
- Hijackthis (useful to evaluate a log occasionally)
- Lavasoft Ad-Aware (not-resident used only on demand)
- Spybot 1.6.30  (not-resident used only on demand)
- SUPERAntiSpyware 4.15.1000  (not-resident used only on demand)
- F-Secure Blacklight  (not-resident used only on demand)
- Rootalyzer  (not-resident used only on demand)
- Java Runtime SE 6 Update 10
- Adobe Flash Player 10.0.12.36
- Adobe Shockwave Player 11.0.3.470
- Foxit Reader 2.3
Hi Avastfan1, I see you keep IE just for MS updates. I have made FF my default browser, and get my MS updates just fine. If I may comment on your anti-spyware selections, I think you have way too many. One real time and one on demand plus SpywareBlaster in the background, would be enough for me. May I suggest dumping AVG which has been done away with in favor of a suite, and AD-Aware which basically only finds adware.  :)
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: VikingBabe on November 23, 2008, 11:34:33 AM
I have McAfee SiteAdvisor installed.  As a guide, I have found it useful while using a search engine but it does have its limitations.  So Finjan is better?  Could it be used in concert with SiteAdvisor or need this be uninstalled?
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: Lisandro on November 23, 2008, 12:25:03 PM
I have McAfee SiteAdvisor installed.  As a guide, I have found it useful while using a search engine but it does have its limitations.  So Finjan is better?  Could it be used in concert with SiteAdvisor or need this be uninstalled?
I think Finjan works better, more accuracy.
You can work with both of them but, probably, browser speed will be compromised.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: VikingBabe on November 24, 2008, 04:40:41 AM
Thank you.  I will try it then.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: safetynut on November 25, 2008, 10:29:37 PM
bob3160:
Having learned the hard way, I am very careful when using IE. I strictly use it for Microsoft and Windows updates—except that some of those updates keep failing.

twl845:
In re: “I see you keep IE just for MS updates. I have made FF my default browser, and get my MS updates just fine.”

Here is a quote from Firefox:
“The Windows Update site and the newer Microsoft Update site are designed to work only with Internet Explorer. The update sites depend on an ActiveX control which scans
your computer to determine which updates are missing. FF does not run ActiveX controls.”

Given this info and the fact that I have not been able to update any Microsoft stuff via FF, I wish I knew your secret of using FF to do these updates.

I say again that I have had nothing but problems from Windows Internet Explorer in the past year. (Hope this is not considered a slur, but taken as a statement of fact from a tired virus-fighter.) Also, I’ve read in many places that IE is notorious for safety lapses, etc.

So I’m still wishing to be given the way to totally circumvent IE while still getting viable updates for all Microsoft and Windows products, even for IE, just don’t want to have to actually use it even if it’s updated!
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: essexboy on November 25, 2008, 10:34:27 PM
Depends on the version of IE you are using I am using IE8 on Vista and I am very secure as I run in a protected mode (same as drop my rights) I do not know though whether XP will run in protected mode.  But in the umpteen years I have been using windows (from 3.1 onward) I have never been unintentionally infected
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: bob3160 on November 26, 2008, 12:51:35 AM
Quote
bob3160:
Having learned the hard way, I am very careful when using IE. I strictly use it for Microsoft and Windows updates—except that some of those updates keep failing.
I think I've been around the block a few times when it comes to software usage which includes browsers.  :)
I have no problems with using IE and staying safe while doing so.
If you feel safer using Firefox, then by all means do so but remember, it's not the browser but the person doing the browsing
that keeps the system clean.

If you want to use Firefox as your default browser and also update windows, add IE Tab to your Firefox addons .

A personal note,
Unless you like a lot of spam, please don't make your email address available on this or any other forum.  :)
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: YoKenny on November 26, 2008, 01:40:05 AM
There is an interesting discussion about Security tips over at CCleaner forum:
http://forum.piriform.com/index.php?showtopic=19017

The no. 1 thing is Common Sense™ that I find is sorely lacking or maybe it is gullibility with a smattering of naivety thrown in.   
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: TheSpirit on November 26, 2008, 07:42:45 PM
Given this info and the fact that I have not been able to update any Microsoft stuff via FF, I wish I knew your secret of using FF to do these updates.

So I’m still wishing to be given the way to totally circumvent IE while still getting viable updates for all Microsoft and Windows products, even for IE, just don’t want to have to actually use it even if it’s updated!

I have never run IE on this computer. Here is how it works for me: normally you just download the update installer .exe file and install it offline. I beleive this is true for all security updates.

Sometimes, MS requires you to verify that you are running genuine Windows, and requires you to download and run a small verification program. This produces a code, presumably showing that you bought a valid license. This code is entered at the MS update site and you can then download the installer. It's been some time since I have done this, so they may have changed this procedure.

Bye bye, IE. Enjoy.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: Eddy on November 26, 2008, 07:54:03 PM
Out of the most known browsers Opera, FireFox, IE and Safari), Opera has been the safest for years. Second comes Safari (I am speaking on windows systems here) the IE and last FF. Yes, FF is the one with the most leaks, security issues. Even more then IE. And don't forget that no plugin/add-on for FF is tested and can be a (huge) security risk.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: FreewheelinFrank on November 26, 2008, 07:58:20 PM
Out of the most known browsers Opera, FireFox, IE and Safari), Opera has been the safest for years. Second comes Safari (I am speaking on windows systems here) the IE and last FF. Yes, FF is the one with the most leaks, security issues. Even more then IE. And don't forget that no plugin/add-on for FF is tested and can be a (huge) security risk.

That came hot and steaming from the rear end of a male bovine quadruped.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on November 26, 2008, 09:30:58 PM
Hi FwF and Eddy,

So you think polonus is wasting his time as a test pilot on Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b3pre) Gecko/20081126 Minefield/3.1b3pre ID:20081126035913 and also as a member of MozillaZine (mainly contributing to the NoScript add-on webforum section there), contributing to Bugzilla occasionally and also analyzing the workings of FF.

One reason we have that many bugs, because it is Open Software and you know that when the soup is tasty, there are many "tasters" to serve the soup that can have a little extra before the main group is getting the goodies.

There is no browser around at the moment that has been build with security in mind. None, period. End of discussion, the way the Internet works would not tolerate it, I assume...

You see that when you underbind the working of cookies, scripts, redirects etc. the work gets harder between the keyboard and the chair. I have turned this browser inside out, had it on my comp in what kind of configuration you like, experimented with all sort of filters, had good extensions and even better extensions and one extension I will never leave (NoScript), analyze all my leaks, every occasional crash, I have tweaked it to extremes, and I still return to it. Use Flock sometimes, SRWare Iron (the Chrome klone without the privacy issues GoogleChrome has) to render pages where Firefox is not working fully in optima forma. All traces of the browser leave my computer before I close it down, links I save for Flem.
For a browser with 14% market share Firefox 3.0 is not more insecure than other browsers are, that is my opinion and I have a good track record,

polonus


Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: TheSpirit on November 27, 2008, 07:32:35 AM
That came hot and steaming from the rear end of a male bovine quadruped.

Quote from Shakespeare's Macbull?
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: alanrf on November 27, 2008, 09:09:21 AM
Eddy,

you were one of the first I had discussion with 4 years ago when I first entered this forum and I learned to respect your posts.

I hope that you will forgive me asking for some backup information on the relative security of browsers you have posted in this thread.

Best regards,

Alan   
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: safetynut on November 30, 2008, 11:16:33 PM
bob3160:
Thank you for the knowledge about the IE Tab in Firefox, I had no idea. I have no Firefox addons. I have spent the year just trying to make the fundamentals work and be free of malware, etc. Speaking of which, along with other issues, if I ever get things straightened out, I will make an effort to get this IE Tab.

Thanks too for the email advice. I am just beginning to use forums, and I am still less than savvy about many aspects of them. Then too, it’s difficult to read and comprehend all the info on each forum involving their use because I have limited time to spend.

TheSpirit: I will comment on what you mentioned. Please correct anything I am misunderstanding.

1. “I have never run IE on this computer. Here is how it works for me: normally you just download the update installer .exe file and install it offline. I beleive this is true for all security updates.”

But in order to download the.exe file, don’t you have to do it via IE (given the stipulation in Reply #17) even if you close the browser and then begin the install? (This is if I don’t have a Firefox IE Tab that bob3160 mentions.)

2. “Sometimes, MS requires you to verify that you are running genuine Windows, and requires you to download and run a small verification program. This produces a code, presumably showing that you bought a valid license. This code is entered at the MS update site and you can then download the installer. It's been some time since I have done this, so they may have changed this procedure.”

I get automatic notification of updates. But if you go to the MS update site it always scans your system to see what updates you need—and to verify that you have a valid license. But it doesn’t indicate that it’s downloading a program to do the check. And I’ve never had to enter a code to download the file in order to install.

So, I guess things have changed since you did this??




Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: BluGan on December 01, 2008, 12:22:36 AM
hi ! it's me again :o but i just want to know if you put add ons like Finjan and Dr. Web ,does it make your browsing speed kinda slow?


Thanks and peace
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: BluGan on December 01, 2008, 12:31:26 AM
and 1 more thing ! whats the difference between WOT and Scandoo

Thanks again
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: DavidR on December 01, 2008, 12:54:14 AM
It would entirely depend on your connection method (dial-up or broadband). I have dial-up and it certainly slowed searches not too much in the loading of actual pages, I removed Finjan and scandoo, WOT doesn't seem to any appreciable effect on my searches.

If you are talking of the firefox DrWeb link checker (e.g. right click on a link to check it) then that has no impact on general searches or browsing as it is on-demand, you initiate the check, though the actual check is very slow at times, especially on dial-up.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on December 01, 2008, 01:06:42 AM
Hi DavidR,

I did not notice any change with scandoo using it for a search engine, it is as quick as the google results it gives. it is no add-on.
What is slowing down actually even on ADSL is MCAfee SiteAdvisor! Much more that finjan ever did.
But there are things that are slowing you down really on dial up and that is retrieving images through Google because that uses redirects. If you block redirects that you do not need with RequestPolicy add-on, so block all the redirects on a page that are not essential, you surf a lot faster! Have you tried SRWare's Iron browser, I think that is the ideal browser for speed for people on dial-up connections! And a lot safer than Google's own Chrome,

polonus
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: BluGan on December 01, 2008, 01:28:27 AM
ahh ok ok.since i rely on you guys.please help me decide.which 1 should i use? WOT or Scandoo or Finjan ? cuz i've been reading their description, for me they look like the same( sigh... i'm so confused...lol)

thanks and peace
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: Lisandro on December 01, 2008, 01:32:29 AM
which 1 should i use? WOT or Scandoo or Finjan ?
If you use Firefox, WOT.
If you use IE, Finjan.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on December 01, 2008, 01:41:29 AM
Hi BluGan,

While there are no conflicts I have all three installed in my Firefox Minefield browser.
Sometimes WOT scans differ from finjan's and then I load up DrWeb's av link checker to check the link or
go here:  http://linkscanner.explabs.com/linkscanner/default.aspx
or here: http://online.us.drweb.com/ (if you do not have the add-on),
or you can check a suspicious url here: http://safeweb.norton.com/noscript/

Enjoy your added security,

polonus

P.S. The DrWeb's link checker plug-in download site: https://addons.mozilla.org/en-US/firefox/addon/938
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: BluGan on December 01, 2008, 03:43:00 AM
oh yeah.i used the link scanner, they have the LinkScanner Pro trial version.is it worth to download the trial ? i guess it has a limited time right?

thanks and peace
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: YoKenny on December 01, 2008, 04:11:08 AM
and 1 more thing ! whats the difference between WOT and Scandoo

Thanks again

I don't use Scandoo nor DrWeb but I do use WoT on my real old 500MHZ PIII and it does not slow down browsing with IE8 beta2.

I use Mcafee SiteAdvisor and it does not slow down browsing but sometimes its servers are busy so results might be slow.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: TheSpirit on December 01, 2008, 07:48:41 AM
@safetynut
I think there is a difference of culture here. When you do the standard online Windows update, your computer effectively becomes a part of Microsoft. They can do whatever they like with your personal property; they can check your license, they can check all your software (not only MS software) and they can check your data! They can also install whatever they like and change whatever settings they like. This is supposed to be a good thing, but it can - and does from time to time - cause a lot of harm.

Some of us don't want to be a part of MS and do things differently. So let me ask: why do you want to use Fx for Windows updates and what do you expect to achieve? It takes some work to do it, and if you have no big motivation, maybe you should forget it?

Maybe you should learn how to download (exe) files with Fx. I recommend using FlashGot (and an external download manager). You have a long way to go and a lot of reading to do.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: YoKenny on December 01, 2008, 02:25:08 PM
TheSpirit, I would hate to be you. 

Do you wear both a belt and suspenders on your pants?

Do you take an umbrella with you on sunny days?

When Microsoft conspiracy theories spin out of control
http://blogs.zdnet.com/microsoft/?p=97
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: Go Pack Go on December 01, 2008, 10:54:22 PM
It would entirely depend on your connection method (dial-up or broadband). I have dial-up and it certainly slowed searches not too much in the loading of actual pages, I removed Finjan and scandoo, WOT doesn't seem to any appreciable effect on my searches.

If you are talking of the firefox DrWeb link checker (e.g. right click on a link to check it) then that has no impact on general searches or browsing as it is on-demand, you initiate the check, though the actual check is very slow at times, especially on dial-up.

which 1 should i use? WOT or Scandoo or Finjan ?
If you use Firefox, WOT.
If you use IE, Finjan.

DavidR, you think Finjan slowed down your searches on dialup?
You removed Finjan and thought that WOT didn't slow down your searches?  Why do you recommend Finjan over WOT for IE then?
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: DavidR on December 01, 2008, 11:20:58 PM
I haven't recommend it for IE as primarily I avoid IE like the plague and haven't used Finjan on IE so I could hardly recommend it.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on December 02, 2008, 07:31:59 PM
Howdy Go Pack Go,

I am rather satisfied about finjan, and had it on Minefield from day 1. It scans relevant pages in real time and shows a security rating based on actual page content. Detects malicious content based on code analysis, rather than using signatures,


polonus
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: TheSpirit on February 02, 2009, 05:51:29 AM
TheSpirit, I would hate to be you. 

Do you wear both a belt and suspenders on your pants?

Do you take an umbrella with you on sunny days?

When Microsoft conspiracy theories spin out of control

Maybe you are just too naive? What about this:

http://tech.slashdot.org/firehose.pl?id=3267983&op=view (http://tech.slashdot.org/firehose.pl?id=3267983&op=view)
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: YoKenny on February 02, 2009, 06:54:48 AM
TheSpirit, I would hate to be you. 

Do you wear both a belt and suspenders on your pants?

Do you take an umbrella with you on sunny days?

When Microsoft conspiracy theories spin out of control

Maybe you are just too naive? What about this:

http://tech.slashdot.org/firehose.pl?id=3267983&op=view (http://tech.slashdot.org/firehose.pl?id=3267983&op=view)

Typical Microsoft bashing by a Firefox fanboy.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: Avastfan1 on February 02, 2009, 10:51:04 AM
You didn't spell it correctly. It's 'Micro$oft'.  ;)
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: twl845 on February 02, 2009, 02:12:46 PM
I have tried to avoid using IE and use Firefox instead. However, the only way to get Windows OS updated is via IE, so I have to use it for that if nothing else.

But recently I’ve been in IE more than I wanted because I’ve been trying to get info on updates for both Windows OS and Office 2003 that keep failing to install after they’re downloaded. (Is it just me, or is trying to find info on Microsoft’s website like being caught in one gigantic KB loop??)

Anyway, how can you avoid IE if you must get Windows OS updates and Office updates?

I made FF my default browser, and it takes care of Microsoft updates fine. IE has no need to exist.  ;D
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: bob3160 on February 02, 2009, 06:38:53 PM
I wonder how many of you Microsoft bashers actually us an operating system other than windows?
As long as you continue to use their operating system, you really don't have any real firepower to back up
all your anti Microsoft sentiments regardless of how you spell it.  ;D
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: DavidR on February 02, 2009, 07:32:53 PM
I made FF my default browser, and it takes care of Microsoft updates fine. IE has no need to exist.  ;D

Wrong, IE exists because it is an integral part of the OS and you would be surprised just what this does. The display of windows explorer file structure, etc. uses IE, Help file display uses IE, if you use Outlook Express of other MS email clients the preview window uses IE, etc. etc.

So long as it is an integral part of the OS so it has a need to exist and whatever your default browser is won't change that. Windows Update (the auto one) doesn't require a browser so you can get away with that.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: twl845 on February 02, 2009, 08:34:45 PM
I made FF my default browser, and it takes care of Microsoft updates fine. IE has no need to exist.  ;D

Wrong, IE exists because it is an integral part of the OS and you would be surprised just what this does. The display of windows explorer file structure, etc. uses IE, Help file display uses IE, if you use Outlook Express of other MS email clients the preview window uses IE, etc. etc.

So long as it is an integral part of the OS so it has a need to exist and whatever your default browser is won't change that. Windows Update (the auto one) doesn't require a browser so you can get away with that.
Really. I wasn't aware of that. But Win explorer is off line so how does IE come into play? When I search an Outlook file while using it, the online help comes up under FF. Do you have anywhere I can study your findings? Thanks.  :)
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: polonus on February 02, 2009, 09:06:22 PM
Hi twl845,

Well IE is an integral part of the Windows OS. There are a couple of reasons why it would be unwise to remove IE from the OS completely (if that could be done). Windows for the first time for IE8 promised to strictly keep up to web standards, other browsers try to get bundled too with an OS like GoogleChrome recently, and Firefox already existed before the so-called browser wars - it just changed its identity, for a lot of users it would be a puzzle as what alternate browser to install, as IE is a synonym for browsing, and that would or could lead to additional crapware, and we have already a lot of that (browzar = IE-clowning shellcode, etc, they build a Pr0n-button and "they are state of the art" ;D.)
What integrating brought IE as a benefit, and what other browsers are lacking is, that part of the browser starts already as the OS starts, well could be expected as it is part of it.
Browser comparison in a lot of cases goes like a conversation on culinary tastes. There is no...etc.
The minuses of IE is that a lot of users don't configure it like it should come, and that is not-out-of-the-box, but a lot of normal users don't know anything else, launch and click, click, click > malware..
For all browsers it is better to use the application with normal user rights, it can do less harm that way..

Then the browser security discussion has not that long of a history. A lot of even browser developers did not code with security at mind in the previous century or even some years ago. And fuzzing a browser does not give you design flaws - especially the flaws that are exploitable. There still is not a common security policy to be implemented into all browsers to prevent for instance the storm of SQL I-frame malware installs etc. It does not exist or there is just a general outlay to plan it...
It seems that NoScript in Fx is more or less their last bastion that has not been circumvented, and still stands as a rock.
Perspectives, RequestPolicy, CSP firekeeper and TDN all help towards a more secure Fx or Flock browser, but there is still along way to go, and the interests of web-developers, click-stream-trackers and profilers to bend the security rules a bit or byte to make that functionality possible does not help either towards that goal of better security.
There are people that are directing these questions of in-browser security. I am one of them. So let us join forces together and make all browsers more secure,

polonus
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: DavidR on February 02, 2009, 10:08:20 PM
<snip>
Really. I wasn't aware of that. But Win explorer is off line so how does IE come into play? When I search an Outlook file while using it, the online help comes up under FF. Do you have anywhere I can study your findings? Thanks.  :)

Basically it is using IE in the background to display the folder view in windows explorer, so whether or not you realise it many functions in windows use IE for the display function.

The key word in your response is 'online' what you are viewing is a standard web page. When I said help file, they are .chm file types that reside on your system, the on-line help files are .html/.htm, etc. format and your browser is used to display that.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: twl845 on February 02, 2009, 11:20:38 PM
Thanks to DavidR & Polonus for that info. I guess I better keep IE healthy even though I don't use it.  8)
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: DavidR on February 02, 2009, 11:28:26 PM
You're welcome.

Yes, sneaky really, so you have to keep IE up to date even if you don't use it as your browser.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: Eminem on February 05, 2009, 10:20:05 PM
i use internet explorer and have had no problems with it.
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: .: L' arc :. on February 07, 2009, 03:58:29 PM
-= Is IE really unsafe..? I hope IE8 will be released with extra-"security" widgets..
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: YoKenny on February 07, 2009, 07:49:37 PM
-= Is IE really unsafe..? I hope IE8 will be released with extra-"security" widgets..

It has extra security but I don't think they are called "widgets".
Title: Re: IBM: Avoid using Internet Explorer browser!
Post by: bob3160 on February 07, 2009, 11:57:21 PM
-= Is IE really unsafe..? I hope IE8 will be released with extra-"security" widgets..

I have my own widget (http://www.widgetbox.com/widget/bob3160s-blog-geeks) but it has nothing to do with IE 7 or IE8