Microsoft warning over browser security flaw

[zappaDPJ]

Microsoft has issued a "critical" warning over a newly-discovered flaw in Windows.

In a security advisory, the company warned of a loophole that could be used by malicious hackers to steal private information or hijack computers.

The bug potentially affects every user of the Internet Explorer web browser - around 900 million people worldwide.

http://www.bbc.co.uk/news/technology-12325139

This one really is quite nasty so if are an IE user you should apply this fix now: http://support.microsoft.com/kb/2501696

[DorsetBoy]

Thanks Zap 

[Rik]

Ditto. 

[Ray]

 

[pctech]

Cheers Zap, workaround applied.

[MisterW]

Now, Rik, if you'd taken the leap of faith to Linux you wouldn't have these sort of probelms

[Rik]

 

I have the disc and the machine, even a book, I just haven't had the time.

[pctech]

And you meed to devote a lot of time to Linux.

[Rik]

That's right, Mitch, encourage me.

[pctech]

I have to admit I gave up but might get myself a laptop and dual boot it so can tinker at work.

[Rik]

It's a laptop I plan to convert, Mitch. Having a spare seems a bit redundant these days.

[Glenn]

Just go for it.

[Glenn]

I bet you can't get it to look and behave like XP though 

[Rik]

 

I'm not playing, then.

[armadillo]

The other obvious workaround is not to use IE. The vulnerability lies in ActiveX and Active Scripting. These are not supported in Firefox, Opera, Chrome or Safari. The only thing that supports these abominations is IE. No mainstream bank or financial institution will code their sites so as to be dependent on using IE.

[Lance]

I think Egg requires it fo their money manager actually.

[armadillo]

Good reason not to bank with Egg then. 

[Lance]

I don't any more

[pctech]

Unfortunately First Direct's Internet Banking Plus uses the same tech as I asked about it when I joined them.

All the passwords are supposedly encrypted on your system but I'd rather they be on a bank's server somewhere behind several firewalls.

[armadillo]

So is their active scripting something that is fundamental to accessing the site at all or is it only needed for some money management add-on that you can get by without?

I operate on-line bank accounts at Halifax, NatWest, Barclays and Nationwide. They all have different logon and authentication procedures but they all work perfectly in Firefox.

[dudwell]

International phone call yesterday from heavily-accented chap claiming to be Microsoft Support and wanting to help. I hung up of course. They don't waste any time do they?

[Rik]

Time is money.

[Lance]

If I ever get one of those calls I'll just tell them I use Linux. 

[Rik]

 

Better yet, Mac OS.

[DorsetBoy]

Better still is to never get disturbed by any of these calls.