IE 7 exploits

Message

#1 Post by **GomJabbar** » Sat Oct 21, 2006 8:11 am

Attacks, Flaw Reports Mar IE 7 Release

According to The Washington Post blog above, you need to be careful where you download IE 7 from:

The Washington Post: Brian Krebs on Computer Security (blog) wrote:First came a run of junk e-mail claiming to be from Microsoft that tried to get recipients to click on a link and download the latest version of IE (the link, as you may have already guessed, installs a Trojan horse program that opens a back door for hackers on infected PCs.)

davidspalding · #2 Post by **davidspalding** » Sat Nov 11, 2006 10:13 am

I'm waiting for 7.01, or 7 SP1, thankyouverymuch. I've learned NEVER to use the dot-0 release of MS software.

#3 Post by **GomJabbar** » Sat Nov 11, 2006 10:55 am

Where's your sense of adventure?

It's more fun livin' on the "Bleeding Edge"

[well at least sometimes]

I have IE7 final installed. I do like it better than IE6. Nevertheless, I still use Opera as my primary browser.

#4 Post by **Kyocera** » Sat Nov 11, 2006 10:55 am

Hey spalding, where you been, don't say working or something like that

davidspalding · #5 Post by **davidspalding** » Sat Nov 11, 2006 12:21 pm

Well, OKAY. I'm between jobs, my small startup position soured on the vine.

I'm taking a breather boning up on Photoshop, Acrobat, Premiere, and Life.

#6 Post by **Kyocera** » Sat Nov 11, 2006 12:51 pm

Well, it's not like there is nothing going on up around your area, I just hate the traffic on 40 geesh

#7 Post by **jdhurst** » Sat Nov 11, 2006 1:02 pm

davidspalding wrote:I'm waiting for 7.01, or 7 SP1, thankyouverymuch. I've learned NEVER to use the dot-0 release of MS software.

If what you have is working, there is no problem with waiting. On the other hand:

* Windows 2000 Version 0 (no Service Pack) worked wonderfully well compared to Windows 95 (still popular then), Windows 98 (people still using it) and Windows NT 4 Workstation SP6. No problems with that V.0

* Windows XP Pro Version 0 had compatibility problems with legacy software, so my first production version was SP1. But V.0 worked to the 95 percent level. It was reliable, just too new for some products.

* IE7 V.0 seems to be working fine. I downloaded mine from Microsoft (and I verified that), and I also applied the registry fix I posted here to return the menu bar to its proper position (daft kids programming at Microsoft have zero sense of decorum, maturity or productivity).

* The V.0 and newer versions of Freemem Pro work better than V.Newest.

So there is nothing inherently bad about V.0 and as I noted, neither is there anything wrong with waiting, it that serves better.
... JD Hurst

#8 Post by **bill bolton** » Sat Nov 11, 2006 5:18 pm

jdhurst wrote:* IE7 V.0 seems to be working fine. I downloaded mine from Microsoft (and I verified that), and I also applied the registry fix I posted here to return the menu bar to its proper position

I didn't see your post on that, but there is a specific "setting" item which does exactly available in the standard MS group policy editor tool (gpedit.msc).

In the group policy editor it is under "User Configuration" -> "Adminstrative Templates" -> "Windows Components" -> "Internet Explorer"

Cheers,

Bill

K0LO · #9 Post by **K0LO** » Sat Nov 11, 2006 8:25 pm

There ya go, JD. In a previous post you expressed that you didn't want, didn't need the search box in IE7. Now you can disable it. There's a setting in the Group Policy Editor for "Prevent the Internet Explorer Search Box from Displaying". It's near the bottom of the list.

I only wish that the designers of IE7 had given the users more flexibility to customize the browser toolbars a la IE6. Their predefined, locked-in UI has chased me away from IE and into the arms of Firefox.

#10 Post by **jdhurst** » Sat Nov 11, 2006 11:45 pm

Thanks both for the info about IE7 in gpedit. I found some the stuff there. The MS Progammers should put this in the advanced preferences section but didn't so far as I can find. I don't use the search bar, but I have it off to the right out of the way. I am going to try the gpedit stuff soon. ... JD Hurst

davidspalding · #11 Post by **davidspalding** » Sun Nov 12, 2006 11:49 am

I'm a "slow to adopt" where MS is concerned. I'll probably catch up with IE7 when patches for it are not available for 6.x. For now, I LIKE that the toolbars are adjustable, and others' comments hvae me convinced there's little to gain (I use Firefox 90%) and some to lose by leaping to 7. Just my stance, YMMV.

Nick Y · #12 Post by **Nick Y** » Fri Nov 17, 2006 2:00 am

bill bolton wrote:...there is a specific "setting" item which does exactly available in the standard MS group policy editor tool (gpedit.msc).

In the group policy editor it is under "User Configuration" -> "Adminstrative Templates" -> "Windows Components" -> "Internet Explorer"...

To make it a bit easier, the setting referred to above is called 'Moving the menu bar above the navigation bar'. (Obvious, but then there is a long list of other settings to read through.)

davidspalding · #13 Post by **davidspalding** » Tue Nov 21, 2006 4:19 pm

From Robert X. Cringely's Infoworld column:

Internot Explorers: Add SonicWall firewall appliances, WellsFargo.com, QuickBooks 2004, and eBay to the list of things that don’t go well with Internet Explorer 7. Various Cringesters report that each company has warned them off using IE7. eBay claims its site has problems with only the IE7 beta, but frequent Cringe correspondent Ron E. begs to differ — and he gets plenty of backup on eBay's user forums. Do you suppose Microsoft tested IE7 with third-party apps before it launched its “ready or not, here it comes” upgrade? Me neither.

#14 Post by **GomJabbar** » Tue Nov 21, 2006 7:37 pm

Do you suppose Microsoft tested IE7 with third-party apps before it launched its “ready or not, here it comes” upgrade?

Irrelevant. Muhhamed goes to the mountain, not vice versa.

davidspalding · #15 Post by **davidspalding** » Wed Nov 22, 2006 10:35 am

Ha-ha.... Irrelevant for those using IE7 in a vacuum, maybe. For others ... patience is a virtue.

People adopting IE7 need to make informed decisions about compatibility. News of real world users/corporations finding that plugins and sites don't function right due to IE7 changes is worth paying attention.

Besides, you started this thread with a report of flaws and exploits related ot IE7.

#16 Post by **GomJabbar** » Wed Nov 22, 2006 11:19 am

You are very correct David Spalding. I was just making a joke out of it.

People do need to be wary of the upgrade if using IE is crucial to them. For instance, my wife takes online classes through the University of Phoenix. University of Phoenix is picky about the browser that will work. If upgrading to IE7 prevented my wife from using the UoP site, that would be a disaster for her. Consequently, although I have upgraded to IE7 on my laptop, I have purposely not upgraded hers until I know UoP will work on IE7.

Nevertheless, I expect all commercial sites will be migrating to IE7 compatibility very soon because of the upgrade being pushed to unsuspecting users.

davidspalding · #17 Post by **davidspalding** » Wed Nov 22, 2006 12:06 pm

I grokked that. Maybe we should dub IE7 "the elephant in your China shop" (mixed metaphor entirely intentional).

whomung · #18 Post by **whomung** » Sat Dec 02, 2006 5:16 pm

my main concern is making sure "auto-updates" doesn't sneak IE7 onto my machine.... It already tried once.

So removing it permanently from the "updates" list would be great..... The only reasonIE 6 is on my machine is for (1) XP / MS updates; (2) the few sites whose designers are so stupid that refuse to make their site work with anything but IE

Other than that..... I've got ZERO reason for upgrading to a buggy, firefox/opera wannabe....

I just want to block it from the list

whomung · #19 Post by **whomung** » Sat Dec 02, 2006 5:37 pm

GomJabbar wrote:
Nevertheless, I expect all commercial sites will be migrating to IE7 compatibility very soon because of the upgrade being pushed to unsuspecting users.

Here's a link to a MS software tool to block automatic download and installation of IE 7 as part of "system upgrades".... you'll need to follow the bread crumbs from there

Expecting the world to automatically embrace this new browser without even bothering to tell us that it's being automatically installed on our computers without any express interest or permission on the end users part..

I hate Microsloth....

http://www.microsoft.com/downloads/deta ... laylang=en

Just say no to IE 7.....

#20 Post by **jdhurst** » Sat Dec 02, 2006 5:49 pm

@whomung - Do as you wish. I'm sure no one cares much. But please slow down on the rhetoric. IE7 works just fine. Windows works just fine. If you wish to use something else, please just quietly do it. Thank you. ... JD Hurst

davidspalding · #21 Post by **davidspalding** » Sat Dec 02, 2006 6:34 pm

I can see how the tool might be handy in orgs where express, automatic updates are configured ... on my system, MS installs nothing without my confirming the download and installation. So ... no need.

Speaking of "quiet," I'm done with this thread. Signing off.... ,:)

whomung · #22 Post by **whomung** » Sat Dec 02, 2006 6:43 pm

jdhurst wrote:@whomung - Do as you wish. I'm sure no one cares much. But please slow down on the rhetoric. IE7 works just fine. Windows works just fine. If you wish to use something else, please just quietly do it. Thank you. ... JD Hurst

It's not about functionality or preference.... It's about a a business model where a vendor feels perfectly OK installing new software on my machine without major notification --a vendor who will repeatedly try to install that software unless I stick my elbow in my ear to stop them; and who has no real concern for the impact of their desire for corporate returns on me or my machine....

I read this thread because it's about the **problems** people have experienced as a result of this thinking.... And all the hoops you have to jump through to avoid MS's stratagy ramming IE 7 down your throat, instead of leaving it up to you as a choice

Obviously, openly mocking that kind of business mentality is inappropriate.... I'm sorry

#23 Post by **JaneL** » Sat Dec 02, 2006 8:38 pm

whomung wrote:Obviously, openly mocking that kind of business mentality is inappropriate.... I'm sorry

No, what's inappropriate is posting messages that are likely to start an OS war (just trust me on this - it will). We're a little tired of those and don't even pretend to be an advocacy group for any particular OS. Stick to ThinkPads, please.

IE 7 exploits

IE 7 exploits

FYI

Who is online