Friday, March 30, 2007

And we are still using Microsoft IE becuase?

Microsoft confirms Windows zero-day, drive-by exploits by ZDNet's Ryan Naraine -- [UPDATE: March 29, 2007 @ 1:15 PM Eastern] Microsoft has confirmed that this is indeed a zero-day flaw that will require a security update. Although Internet Explorer is the primary attack vector, this is a vulnerability in the way Windows handles animated cursor (.ani) files. From Redmond's security advisory: The threat is caused by insufficient [...]



When will we learn... just one more zero day attack that has to be managed. Honestly it would take less time to "patch" IE by switching to Mozilla Firefox. I noticed recently that while Mozilla is not "bug" free the time it takes to patch a reported vulnerability is hours, or days, at most. Probably an advantage to NOT having the browser integrated into the OS?

No comments: