-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
____/ RonB on Wednesday 17 December 2008 10:13 : \____
>
>
> "The major press outlets are abuzz this morning with news of a major new
> security flaw that affects all versions of Internet Explorer from IE5 to
> the latest beta of IE8. The attack has serious and far-reaching
> ramifications -- and they're not just theoretical attacks. In fact, the
> flaw is already in wide use as a tool to steal online game passwords, with
> some 10,000 websites infected with the code needed to take advantage of the
> hole in IE.
>
> Virtually all security experts (as well as myself) are counseling users to
> switch to any other web browser -- none of the others are affected,
> including Firefox, Chrome, and Opera -- at least for the time being, though
> Microsoft has stubbornly said it "cannot recommend people switch due to
> this one flaw." Microsoft adds that it is working on a fix but has offered
> no ETA on when that might happen. Meanwhile it offers some suggestions for
> a temporary patch, including setting your Internet security zone settings
> to "high" and offering some complicated workarounds. (Some reports state,
> however, that the fixes do not actually work.)"
>
> http://tech.yahoo.com/blogs/null/111811
>
> And, according to WinTrolls, I'm supposed to be worried about "potential"
> security holes in Linux.
>
> When the ship is sinking, you jump into the lifeboat. But, it seems (if
> you're a WinTroll), you're more likely to say, "Well, the lifeboat *might*
> get a hole in it some day, so I think just stay here and sink."
The fast distribution of this on Web sites is interesting too. From yesterday:
"10,000 sites hijacked.. Because Microsoft hasn't fixed a flaw"
http://www.theinquirer.net/inquirer/news/054/1050054/10-000-sites-hijacked
- --
~~ Best of wishes
Roy S. Schestowitz | "Life is too short to proofread"
http://Schestowitz.com | GNU is Not UNIX | PGP-Key: 0x74572E8E
http://iuron.com - proposing a non-profit search engine
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAklI6D0ACgkQU4xAY3RXLo72EACfTG6orC3cFBSLy/g3f32gtJBV
jeQAoIgLaYB/jwuzWN7fptuZ9/+bI+Xz
=sC4c
-----END PGP SIGNATURE-----
|
|
