*Warning* IE users! New 0-day exploit affects fully patched 2k and XP systems!

[280Z28]

All you have to do is browse to a maliciously designed site that exploits the security hole and people can take over your PC, simple as that.

 

Microsoft has not released a patch yet to address this exploit.

 

Read about it here if you want details:

http://secunia.com/advisories/15546/

 

The SANS ISC's Ullrich said IE users should consider switching to Firefox of Opera.

 

I have made a page for brand new users of Firefox to help out with the install. Existing users, this page can help you make your copy immensely faster.

http://www.djss.net/zone/computers/firefox.html

[naplesZ]

How about Netscape?

[280Z28]

How about Netscape?

 

IE is the only vulnerable one.

[Gollum]

How about Netscape?

 

I hate netscape. I don't think you realise how bad it is. Design some webpages, then you'll feel my pain.

 

Open source all the way baby. Although I bet the person(s) who found this new hole are using it to scare people into using FF.

[RB26powered74zcar]

 

I have made a page for brand new users of Firefox to help out with the install. Existing users' date=' this page can help you make your copy [i']immensely[/i] faster.

http://www.djss.net/zone/computers/firefox.html

 

OK, I use firefox but I'm not a computer guru, what would I do with this...

Slow Computer, Fast Connection

 

user_pref("content.max.tokenizing.time", 3000000);

user_pref("content.notify.backoffcount", 5);

user_pref("content.notify.interval", 1000000);

user_pref("content.notify.ontimer", true);

user_pref("content.switch.threshold", 1000000);

user_pref("content.maxtextrun", 4095);

user_pref("nglayout.initialpaint.delay", 1000);

user_pref("network.http.max-connections", 48-);

user_pref("network.http.max-connections-per-server", 16);

user_pref("network.http.max-persistent-connections-per-proxy", 16);

user_pref("network.http.max-persistent-connections-per-server", ;

user_pref("dom.disable_window_status_change", true);

One of the changes made for this particular configuration is the final line where the status bar is disabled for changing web pages to save processor time.

[280Z28]

OK' date=' I use firefox but I'm not a computer guru, what would I do with this...

[b']Slow Computer, Fast Connection[/b]

 

user_pref("content.max.tokenizing.time", 3000000);

user_pref("content.notify.backoffcount", 5);

user_pref("content.notify.interval", 1000000);

user_pref("content.notify.ontimer", true);

user_pref("content.switch.threshold", 1000000);

user_pref("content.maxtextrun", 4095);

user_pref("nglayout.initialpaint.delay", 1000);

user_pref("network.http.max-connections", 48-);

user_pref("network.http.max-connections-per-server", 16);

user_pref("network.http.max-persistent-connections-per-proxy", 16);

user_pref("network.http.max-persistent-connections-per-server", ;

user_pref("dom.disable_window_status_change", true);

One of the changes made for this particular configuration is the final line where the status bar is disabled for changing web pages to save processor time.

 

That line stops Javascript from changing the status bar text for purposes such as hiding or worse spoofing the true destination of a link you are about to click.

 

You can set your preferences by typing "about:config" in the address bar (where you would normally type http://...) and then setting each item to the specified value by double clicking on it. Some items will not be listed because they are hidden preferences. You can set them by right clicking and then clicking Add. true/false values are Boolean, and numbers are Integers.

[mario_82_ZXT]

I hate netscape. I don't think you realise how bad it is. Design some webpages' date=' then you'll feel my pain.

 

Open source all the way baby. Although I bet the person(s) who found this new hole are using it to scare people into using FF.[/quote']

REALLY start designing webpages and realize what a pain IE is compared to Mozilla Firefox and Netscape (tables and frames come to mind, as well as certain types of images).

 

IE is garbage, everyone I know who uses it averages a lot more spyware then those who don't.

 

Thanks for the warning, and the about:config looks like a fun thing to mess with.

Mario

[b__sosick]

Wait...you mean people still use IE?

HA!

[rudypoochris]

REALLY start designing webpages and realize what a pain IE is compared to Mozilla Firefox and Netscape (tables and frames come to mind' date=' as well as certain types of images).

 

IE is garbage, everyone I know who uses it averages a lot more spyware then those who don't.

 

Thanks for the warning, and the about:config looks like a fun thing to mess with.

Mario[/quote']

 

Have you tried IE 7... it is packaged with Windows Vista. They took care of the images and I don't know about spyware and such. ALso, the main reason IE gets so much spyware is because most people use it, so people write malicious things specifically for it. I seriously wouldn't worry about this threat though, things like this happen everyweek and I have never been affected, and this computer is on the net 24/7.

[johnc]

Wait...you mean people still use IE?

HA!

 

Just a warning, if this turns into an IE vs. Firefox vs. Netscape vs. something else war this thread will be deleted.