Germany Rises Up Against Internet Exploder

Well, it’s more a very stern warning, but not to be taken lightly by anyone!

An article from the BBC chronicles the scope of the problem and how vehement the German government is in its warning.

The German government has warned web users to find an alternative browser to Internet Explorer to protect security.

The warning from the Federal Office for Information Security comes after Microsoft admitted IE was the weak link in recent attacks on Google’s systems.

Microsoft rejected the warning, saying that the risk to users was low and that the browsers’ increased security setting would prevent any serious risk.

How many users, at home or at work, use the maximum settings for security? Why should they? Other browsers don’t get attacked and also don’t aggravate their users in the same way. No other browser is so slow and so unsafe.

However, German authorities say that even this would not make IE fully safe.

Most people would agree. Too bad the Venn diagram of the intersection of those people and the folks at Microsoft looks like this “ o   o”.

Thomas Baumgaertner, a spokesman for Microsoft in Germany, said that while they were aware of the warning, they did not agree with it, saying that the attacks on Google were by “highly motivated people with a very specific agenda”.

“These were not attacks against general users or consumers,” said Mr Baumgaertner.

“There is no threat to the general user, consequently we do not support this warning,” he added.

Microsoft says the security hole can be shut by setting the browser’s security zone to “high”, although this limits functionality and blocks many websites.

However, Graham Cluley of anti-virus firm Sophos, told BBC News that not only did the warning apply to 6, 7 and 8 of the browser, but the instructions on how to exploit the flaw had been posted on the internet.

“This is a vulnerability that was announced in the last couple of days. Microsoft have no patch yet and the implication is that this is the same one that exploited on the attacks on Google earlier this week,” he said.

“The way to exploit this flaw has now appeared on the internet, so it is quite possible that everyone is now going to have a go.”

Microsoft traditionally release a security update once a month – the next scheduled patch is the 9th of February. However, a spokesman for Microsoft told BBC News that developers for the firm were trying to fix the problem.

“We are working on an update on this issue and this may well involve an out of cycle security update,” he said.

Fix development

However, this is no easy task. Not only have the firm got to fix the loophole, but they have to ensure it does not create another one and – equally importantly – works on all computers. This is a challenge compounded by the fact they have to fix three different versions of its browser.

Microsoft said that while all versions of Internet Explorer were affected, the risk was lower with more recent releases of its browser.

The other problem facing developers is that the possible risk might not be prevented by anti-virus software, even when recently updated.

“We’ve been working to analyse the malware that the Chinese are using. But new versions can always be created,” said Mr Cluley.

“We’ve been working with Microsoft to see if the damage can be mitigated and we are hoping that they will release an emergency patch.

“One thing that should be stressed is that every browser has its security issues, so switching may remove this current risk but could expose you to another.”

Just as Mr. Ballmer doesn’t understand why Google might pull out of China, he doesn’t understand why the browser that is ranked dead last by everyone outside the confines of Redmond campus should be sacked. If Microsoft can do a u-turn on an operating system, like Vista, and produce Windows 7, the dream can still be alive.

Still, what is keeping them? Where is Gazelle? Where is an answer to the problems that Internet Explorer has had for the last 10 years? Some group of people need to be burning the midnight oil in Redmond, Washington; anything else is simply stupid, and makes us all know that the slow slide that Microsoft is taking toward irrelevance is starting to pick up speed.



What this browser does is illegal everywhere except in certain parts of Nevada, so why is it still on the loose?