ie8 fix
madison

Zero Day

Ryan Naraine, Emil Protalinski and Dancho Danchev

IE8 outperforms competing browsers in malware protection -- again

By | August 19, 2009, 6:16am PDT

Summary: A recently released study by NSS Labs is once again claiming that based on their internal tests, Microsoft’s Internet Explorer 8 outperforms competing browsers like Google’s Chrome, Mozilla’s Firefox, Opera and Apple’s Safari in terms of protecting their users against “socially engineered malware” and phishing attacks. Not only did IE8 top the chart, but also, the [...]

A recently released study by NSS Labs is once again claiming that based on their internal tests, Microsoft’s Internet Explorer 8 outperforms competing browsers like Google’s Chrome, Mozilla’s Firefox, Opera and Apple’s Safari in terms of protecting their users against “socially engineered malware” and phishing attacks.

Not only did IE8 top the chart, but also, the rest of the browsers have in fact degraded their “socially engineered malware” and phishing block rate in comparison to the results released by the company in the March’s edition of the study.

How objective is the study? For starters, it’s Microsoft-sponsored one. Here’s how it ranks the browsers:

Socially engineered malware block rate:

  • Microsoft Internet Explorer v8 - 81% block rate
  • Mozilla Firefox v3 - 27% block rate
  • Apple Safari v4 - 21% block rate
  • Google Chrome 2 - 7% block rate
  • Google Chrome 2 - 7% block rate

Phishing attacks block rate:

  • Microsoft Internet Explorer v8 - 83% block rate
  • Mozilla Firefox v3  - 80% block rate
  • Opera 10 Beta - 54% block rate
  • Google Chrome 2 - 26% block rate
  • Apple Safari v4 - 2% block rate

What is “socially engineered malware” anyway? Basically, it’s the direct download dialog box that appears on a, for instance, scareware or Koobface video page spoofing Facebook’s layout, like the one attached. using “socially engineered malware” as a benchmark for malware block rate isn’t exactly the most realistic choice in today’s threatscape.

And even if it is, some pretty realistic conclusions can be drawn by using some internal traffic statistics from Koobface worm’s ongoing malware campaigns. The Koobface worm, one of the most efficient social engineering driven malware, is a perfect example of how security measures become obsolete when they’re not implemented on a large scale. The stats themselves:

- MSIE 7 - 255,891 visitors - 43.33%
- MSIE 8 - 189,380 visitors - 32.07%
- MSIE 6 - 76,797 visitors - 13.01%
- Javascript Enabled - 585,374 visitors - 99.13%
- Java Enabled - 576,782 visitors - 97.68%

What does this mean? It means that with or without the supposedly working “socially engineered malware” block filter using a modest sample of several hundred URLs, the Koobface botnet is largely driven by MSIE 7 users. The irony is that the previous edition of the study dubbed IE7 a browser which “practically offers no protection against malware” with the lowest block rate achieved back than - 4%.

Just like the previous edition of the study, this one also excludes the notion that client-side vulnerabilities (Secunia: Average insecure program per PC rate remains high; Secunia: popular security suites failing to block exploits) continue contributing to the “rise and rise” of web malware exploitation kits. By excluding client-side vulnerabilities, the study isn’t assessing IE8’s DEP/NX memory protection, as well as omitting  ClickJacking defenses and IE8’s XSS filter, once pointed out as a less sophisticated alternative to the Firefox-friendly NoScript.

Socially engineered malware is not the benchmark for a comprehensive assessment of a browser’s malware block rate. It’s a realistic assessment of the current and emerging threatscape combined with comprehensive testing of all of the browser’s currently available security mechanisms, a testing methodology which I think is not present in the study.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, malware and cybercrime incident response.

Disclosure

Dancho Danchev

More details on Dancho Danchev's current and past professional affiliations, can be found in his LinkedIn profile.

Biography

Dancho Danchev

Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, and cybercrime incident response. He's been an active security blogger since 2007, and maintains a popular security blog sharing real-time threats intelligence data with the rest of the community on a daily basis. More details on Dancho Danchev's current and past professional affiliations, can be found in his LinkedIn profile. You can also follow him on Twitter

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
164
Comments

Join the conversation!

Just In

RE: IE8 outperforms competing browsers in malware protection -- again
birumut Updated - 29th Apr 2011
Great!!! thanks for sharing this information to us!
seslisohbet seslichat
0 Votes
+ -
suspect since the winner is also the sponsor, why even print it.
sponsored by MS that it`s credibility is zero, or close to zero. But the same goes for any test sponsored by Apple or the Linux comunity.

Waiting for an AdBlock+ addon for Chrome...come on already.
0 Votes
+ -
But if one was done by
GuidingLight 19th Aug 2009
Google or Mozilla, and their browsers scored poorly, would they post results showing IE8 as better, or do they just realese reports in which their browsers came out on top?

0 Votes
+ -
Good question
JonWayn 19th Aug 2009
Or they might not release that report at all
0 Votes
+ -
Wrong
deepee912 20th Aug 2009
>>Or they might not release that report at all

Wrong, the article clearly states:

'The irony is that the previous edition of the study dubbed IE7 a browser which ?practically offers no protection against malware?'
0 Votes
+ -
Piss off loser (NT)
No More Microsoft Software Ever! 16th Sep 2009
NT
0 Votes
+ -
Actually I would believe a study sponsored
CodeCurmudgeon Updated - 19th Aug 2009
Actually I would believe a study sponsored by Microsoft, Apple, Google, or Canonical - But only if their product lost.

You figure study authors will give their sponsors as good a shot as possible, and then if they lost they LOST.

Of course, if the sponsors win, it is pretty meaningless.
0 Votes
+ -
Browser wars are on again?
Rude Union 24th Aug 2009
They've paid for studies in the past for other products and every single time their top placement was controversial because in the real world this is not the case.
Every company, since forever, will give themselves a little extra to have a slight lead in their advertising. Just look at ATI vs Nvidia as the biggest example. But this study is a leap in stupidity. I recommend everyone to use IE8 and browse all kinds of suspected malware sites and see how far it protects you.
The irony is I cleaned a machine this morning with IE8 and spyware somehow was installed. No joke. How did that happen NSS Labs?
IMHO anything is better than IE.

What's the deal? I thought they didn't care about going to war against other browsers since they won the marketshare war? Hey, I know they're losing ground, I see the news updates, but I find it interesting that they're dusting-off their old bag of tricks again? What's next, is Balmer going to come out on stage running and screaming again?
0 Votes
+ -
Presentation is everything...
Filker0_z Updated - 27th Aug 2009
When I was doing terminal emulators for a living, a competitor came up with an ad that showed a bar graph comparing performance between themselves and the competition based on results from an independant testing lab (which they had not paid for). The graph appeared to indicate that they were 50% to 90% faster than us (one of the major players in the market at the time). What was not clear unless you read the graph is that this is not what it showed. I don't recall the actual numbers, but it was in terms of CPS throughput (with flow control enabled) while performing certain key operations. If the best performance was, say, 38.4kbps, the base line of the graph was 35.0kbps, so all the graph showed was the margin between the products within less than 15% of the total range of possible values. Also, they only included the results for the tests that they won on, and only on the HW configuration where their video card support was better than ours. We beat them on the same tests (from the same lab) on other hardware.

Even if the article does not say this makes IE8 the most secure browser, the title of the article does.

The fact that the study results, even if correct, are a tiny part of the security story does not matter as much as perceptions created in people without the background to understand the results (or those who don't bother to look into the results).

There are clueless folks posting on both sides. I notice that MS-philes seem to think that the press is pro-FOSS/Linux. I don't see the bias going that way. I also see more uninformed attacks on Linux and Unix than I see on Microsoft. I actually spent a few years (1995-1997) when part of my job was to identify weaknesses and possible attacks or exploits in various types of Internet connected OSs and transactions (regardless of OS), so I think I have a pretty clear picture of what this report actually means, which isn't much.

A comprehensive study of all threats vs. anti{malware, phishing, virus} measures commonly available, including the ease of use and how gracefully they deal with various failures (like being unable to reach a remote database), and weaknesses in the operating environment security (vulnerabilities that allow an attacker to gain control of a system over the network) would include trojans, viruses, drive-by attacks, root-kits, key loggers, escalation of priority, backdoors, etc., but would still not be able to tell you which browser is more secure.

If you have 100 tiny non-overlapping datasets, and you see that in 20 of those, product A was as good or better than other players, but in the other 80 they were well below at least one other major player, you would realize that just looking at those 20 datasets does not give you the whole picture; but if you're not told, up front, that those 80 datasets were excluded, or that they exist at all, you might come to the wrong conclusions. It is my opinion that this is what MS marketing wants to have happen.
0 Votes
+ -
OMG! You agree that Microsoft does ANYTHING to sell their warez! (NT)
No More Microsoft Software Ever! 16th Sep 2009
NT
0 Votes
+ -
Well, on the flip side of that
GuidingLight Updated - 19th Aug 2009
If Apple or Mozilla knew that their browsers where not at good at malware prevention as their competitors, would they fund research to show that?

And even if they themselves did fund some sort of research into that area and found they "lost" do you think they would release those results?

Maybe that is why Microsoft funded this, they knew their competitors would not spend the money only to show IE8 was better?
0 Votes
+ -
If the report was false...
Marty R. Milette 19th Aug 2009
...do you not think that they'd have been 'called' on it?

If the report contained outright lies or was deliberately misleading -- every Linux fanboy would be on them like white on rice.

Can you provide evidence of any of this?

On a second point, since Linux is a bunch of fragmented freebie distributions -- WHO from THAT side of the equation would invest the time and money to do ANY kind of report or study?

Are YOU willing to take a few hundred thousand from your pocket to invest in something like that? If not you, then WHO???

Don't let logic or common sense get in your way...
0 Votes
+ -
"On a second point, since Linux is a bunch of fragmented freebie distributions -- WHO from THAT side of the equation would invest the time and money to do ANY kind of report or study?"
0 Votes
+ -
So WHERE is THEIR report?
Marty R. Milette 19th Aug 2009
0 Votes
+ -
Uhh ... why do one?
daboochmeister 20th Aug 2009
Since in general, with very few exceptions, Linux isn't vulnerable to the kinds of malware attacks tested for in the article, why would a Linux vendor fund a study on how browsers protect against them? Defense in depth, layers ... the OS protects you, even if the browser doesn't, resulting in better OVERALL protection.
0 Votes
+ -
Exactly
Mikael_z 25th Aug 2009
It's just windows which needs protection because it doesn't provide much of the same itself.

So it could be concluded that Microsoft want to persuade their customers to use IE8 instead of the alternatives.

I wouldn't fall for it because ActiveX has been a common vector straight into Windows, the alternatives to IE don't execute ActiveX code, why something like Firefox remains the wisest choice.
0 Votes
+ -
What's with the FUD about ActiveX?
Marty R. Milette 25th Aug 2009
Really, the people who seem to be most terrified by the word "ActiveX" are the people who actually seem to know the least about it -- including what it is FOR and how IE has ALREADY been locked-down to protect it.

Having USED ActiveX to build some super cool and extremely powerful applications (that COULD NOT have been created without it) -- I consider non-Microsoft browsers to be fundamentally 'crippled' without having it.

ActiveX lets you build incredibly powerful and slick-looking web-based applications that can hook in to the full power of the operating system and corporate computing resources.

Java -- well, if you want to create wimpy, slow applications that look like Windows 3 or OS/2 -- enjoy it.

Unfortunately, with great power comes great responsibility. (Thanks spiderman. happy

Yes, evil people too advantage of ActiveX, but Microsoft has had MANY ways to protect users for MANY YEARS.

To start with -- users can completely disable ActiveX. Out of the box, IE will PROMPT users whether or not they want to use unsigned controls.

IE also allows users to configure ActiveX use based on IE ZONES -- either standard or customized ones -- again, users have the complete and total freedom to CHOOSE whether or not to accept either digitally signed and/or unsigned controls.

Using IE Zones -- users can, for example, specify that ActiveX controls will ONLY be loaded when visiting the corporate portal, or any other trusted site -- completely blocking it on any other.

Lastly, there is the difference between digitally signed and unsigned ActiveX controls. Malware writers don't buy digital signatures to do code signing -- and even if they did, the user would be prompted and presented with the name of the developer/company -- so if anything was fishy there, they could simply reject it.

In simplest possible terms -- those people terrified of ActiveX should get a life.

Playing in the sandbox is nice and safe -- but REAL developers enjoy having REAL POWER to develop REAL applications -- and that is very much what ActiveX gives.

As well, there are so many ways to lock down ActiveX capability -- one would be a fool to state that just because IE CAN use ActiveX that this automatically makes it totally insecure. As noted -- corporations AND individuals can lock down ActiveX as much or as little as they want.
  • Flagged
0 Votes
+ -
The report is not credible
Filker0_z 19th Aug 2009
I believe the report is not credible not because of its conclusions, but because of the basis on which its conclusions were made.

The organization issuing the report refuse to define their criteria for measurement. The "social engineered malware" could be just about anything. Without the actual information on which they based their report, I will not accept the conclusion.

IE8 is not more secure than Firefox, it's default configuration is less susceptible to one kind of attack that requires the user to enable the malware. Any browser that supports ActiveX by default is going to have every issue that ActiveX has by default.

I have been a software engineer since the early 1980s. I have been involved in security stuff since before IP networking was common. I wrote opinion pieces about the flaws in the Microsoft ActiveX security model back in 1996-1997, and even made some suggestions on how it could be fixed.

I have studied the security of various network tools, including browsers, identified weaknesses, demonstrated exploits of them, and alerted the authors, CERT, and in one case, a government agency that will not be named, of flaws found before they were exploited in the wild. I have done this professionally.

Therefore, I believe that I'm qualified to say that, without presenting more information, the report is not credible, and should not be used as a factor in decisions as to which browser to adopt at an enterprise level, nor at a personal level.

If you think this report is aimed at individuals, you're mistaken, it's the enterprise. I currently work at a company that has banned Firefox on its network because MS claims it's not secure, and our IT department believes everything MS tells them. The FUD created by such a report, even if it's worthless, can only help MS maintain a strangle hold on IT departments around the world.
0 Votes
+ -
Internet Explorer relys on third parties...
JCitizen Updated - 19th Aug 2009
to mitigate exploits, just like Mozilla relies on NoScript.

My lab honey pots have been attacked on IE7, but not since IE8. Even I don't consider this as evidence of particular improvement.

But I've NEVER had an active X attack for 8 years since Javacools put their registry tool on the market.

And Secunia PSI goes a long way to help in closing exploit holes before a zero day attack! This has pretty much put Windows x64 equal or superior to Linux and OSX in my opinion. The FOSS community don't have attacks anyway, so how to they know? Till they are combat proven, I got my doubts - news has started to filter in about some gaps lately - one of which apparently lasted for 8 years hidden in the original Linux Kernel.

Yes I know they supposedly close the gaps sooner than Microsoft, but in the last year; I've rarely had any holes to close on Vista x64 - not even with java and adobe problems! IE 8 64 bit has had Chrome and FireFox beat for at least two months!

I do not work for any company - I just hate malware to pieces!!!
0 Votes
+ -
Instead of your whole life story...
Rubix_z 20th Aug 2009
...you could have written down some relevant arguments to back your opinion.

"Therefore, I believe that I'm qualified to say that, without presenting more information, the report is not credible"

No your not, I need arguments, not your history.
0 Votes
+ -
You attacked a fine professional who provided:
? Their credentials
? Their historical background of experience
? Their facts
? Their evidence
? Their argument
? Their professional evaluation
? Their professional conclusion
? Their relevance

You provided:
? No credentials
? No historical background of your experience
? No facts
? No evidence
? No argument
? No evaluation of the report or its process
? No value
? No relevance
The credibility relies on the organization that runs the tests. Face it, if Mozzilla sponsored the tests and the organization was unreliable that was running the tests and MS came out on top then the results would be just as much crap.

And visa versa, if the organization running the tests is credible and reliable then the results are what they are. Certainly in any case the organization sponsoring the tests should not be taking the heat for a crappy test with questionable results if the people doing the tests simply pump out what they think the sponsor would like.

The testing organization should take the heat, making their usefulness to anyone questionable.
0 Votes
+ -
These kind of studies are not about which browser is better - on a level
playing field. Its a case of simply looking for the right angle from which
to be able to say that IE 8 is better than all the other browsers.
If this security test were truly impartial, it would cover security threats
across the board instead of coving only a narrow range of security
threats - those that IE 8 seem to be particularly good at identifying.

At the end of the day, this could be defined as Microsoft propaganda and
marketing.
0 Votes
+ -
But the smart filter does outperform the others in terms of discovering these kinds of sites.

Sure it's just one angle, but it's pretty important considering the Linux boxes that get root-kitted, which are far more than most realize, are due to phishing attacks.

  • Flagged
0 Votes
+ -
root-kitted Linux boxes
tmsbrdrs 21st Aug 2009
Please provide evidence showing that it happens more than people realize.

As for the original topic, my neighbor was using IE8, her machine had 52 pieces of malware, viruses, etc which had to be cleaned off.

I put her on FF 3.5 with Adblock Plus. Not only is it more than twice as fast at loading, rendering webpages, displaying media content, but it's also kept her machine safer.

You may say that's completely due to Adblock Plus removing flash advertisements. I completely agree with you. However, addons happen to be the greatest strength of Firefox. I simply used that to my neighbors advantage.
Any OS that would be in the hands of over a billion people worldwide would be full of malware cause people like that don't patch or they fall prey constantly to social engineered attacks (Linux has no protection over these either. If they user gives permission to load a program they can do it on Linux as easy as on Windows).
And the list goes on. Just because Linux is only used by geekdom at this time does not mean it's safer, it just means it's not being used by the legions of non computer techies of the world.

You could have told your neighbor that Vista is highly secure, some in the security industry are saying it's more secure than Linux. There is no doubt it beats OS X which has no security built into the OS as Vista and Linux do.
But with IE in protected mode, smart filter on, and the host of other security features on...such as those mentioned near the bottom of the blog, it's a very secure system and IE8 is secure using those featurs.

Someday when "free" software worms it's way into the lead of marketshare (how can "free" not do that at some point, it's a job killer though) we'll see how well Linux does, but until then you should really reserve judgement since you have no idea how inept or the common user that is not a computer tech will fare with Linux.
  • Flagged
tmsbrdrs responded to your fallacious comparison of Microsoft's Internet Explorer 8 to "root-kitted Linux boxes" by pointing out the correct comparison would be with another browser and selected the strongest competitor to Internet Explorer 8: Firefox.

Evidently you are unable to provide cogent or rationally persuasive arguments in favor of Internet Explorer 8 or against Firefox (any version) because your rebuttal was four paragraphs and you failed to address the real issue.

You wrote a long introductory paragraph about a hypothetical operating system and included an irrelevant and disparaging statement about a computer-adept segment of Linux users. Are you aware that a legion is a quantity of Roman soldiers numbering between 3,000 and 6,000? In modernity, it is simply a large number and your implication is more than one group of large numbers. Do you know how many actual users there are of all versions and derivatives there are of Linux? Do you know how many modern communication devices and appliances now use modified versions of Linux? By ordinary, nontechnically minded people?

Your second paragraph provided an unsupported personal opinion comparing the secureness of Microsoft's Vista, a generalized Linux, and Apple's OS X.

Your third paragraph rambles on about how secure you think Internet Explorer 8 is when various of its features are active.

Your concluding paragraph provides a left-handed acknowledgement that "'free' software" will one day take the largest market-share but refuse to acknowledge that Linux will be in that mix. Finally, you disrespect all computer users who are not technically computer literate, and disparage Linux as a desktop operating system.

However, you failed to respond to tmsbrdrs's points and your own premise, and lost the debate!
appointed nic. In your case, the rhetoric is used to obfuscate the truth.

tmsbrdrs responded to your fallacious comparison of Microsoft's Internet Explorer 8 to "root-kitted Linux boxes" by pointing out the correct comparison would be with another browser and selected the strongest competitor to Internet Explorer 8: Firefox.


that is completely wrong. He didn't point out any such thing and simply gave another "quaint" anecdote about IE8. They are found here often and in regards to most any MS software and how someone's brother's friend's relative knows someone that has a neighbor that works at an OEM and has proof that Microsoft did this or that. Or in this case, the classic neighbor (often substituted with Mother, Grandmother, friend from work et al )
That was what I was replying to. My comments about Linux botnets was in no way differnt from the thousand of Linux or Apple blogs that morph into a referendum on Steve Ballmer etc.
Just trying to fit in man.
Or more correctly, just showing what comes from the other side, but hilariously, it's unnoticed.


Evidently you are unable to provide cogent or rationally persuasive arguments in favor of Internet Explorer 8 or against Firefox (any version) because your rebuttal was four paragraphs and you failed to address the real issue.

I was not trying to make any arguments against Firefox, that kind of behavior is left up to you and others who apparently are regressing into childhood and arguing in a "my Dad can beat up your Dad" manner. You just don't understand those of us with real jobs and who work with real technology are tired of seeing that rubbish in every windows blog.
Any statement in kind is simply sarcastic to try and demonstrate the uselessness of it, but it goes unnotices as such and taken as a real insult, or that I'm a hater of Linux and OS X and ipods and anything other than Microsoft software. I couldn't be any less of a "hater" of any other technology. My only problem is with the users of other technologies who feel the need to attempt and smear the name of Microsoft at all times. My posts are aimed at them, not the technology. Although the bugs and vulnerabilites in OS X and Linux are quite enough for zdnet to blog on nothing else, they just don't focus on that. Linux is given a free pass due to it's basically continuous beta state, and Apple because it's using BSD.
Which was paid for by American taxpayers big time. Knowing that I unwillingly participated in funding the technology that Apple has used, and Linux is totally derived from does not exactly thrill me.


You wrote a long introductory paragraph about a hypothetical operating system and included an irrelevant and disparaging statement about a computer-adept segment of Linux users. Are you aware that a legion is a quantity of Roman soldiers numbering between 3,000 and 6,000? In modernity, it is simply a large number and your implication is more than one group of large numbers. Do you know how many actual users there are of all versions and derivatives there are of Linux? Do you know how many modern communication devices and appliances now use modified versions of Linux? By ordinary, nontechnically minded people?
Speaking of irrelevant...and the "dictionary/grammar smack" that only comes from anal wannabe liberal elitists.
Legion S as a plural is totally acceptable. If there were people marching on the capital in several states or countries, I believe it would be acceptable to refer to these seperate large numbers of people as legions or multitudes. Just as there are many communities of open source and exp. communites supporting Linux based systems.
Of course I know that variants of Linux based systems are what are known as embedded versions of Linux OSes and are in those many modern devices you mention.
I'm not sure, are you saying that makes Linux OSes as "exposed" as Windows?

Although, since you brought it up, a Linux variant being used in certain routers has been getting slammed this year with root kits and creating a Linux Botnet. Have you heard of Psyb0t?
I think you are getting a little too over excited about my post. You can relax. I'm not out to destroy your reason for living.
In fact, I started out on Unix and thoroughly enjoyed working with it. I was doing development in C/C++ on SCO Unix and AT&T System V Rel. 4 and over time performed most of the system administration. It was very hard to work with at that time, which was near the mid 90s.
The patches were very complex and required many prerequsites before installing and the process was a bit slow. This was the days the patches were sent monthly on 1/4" cartridge tapes.
I more or less mastered a derivative of Polyforth, which was a very interesting system and programming environment which required all code be keyed into 1K blocks with a very archaic command set. I loved this language and environment. It was a healthcare system which was open sourced to the customers for internal coding and customization. Updates were a nightmare, especially major point releases as all custom code needed to be very well documented and I would go to the vendor and work with their implementation team to get the custom back into the new release which often required re-writing the custom to work with new code on the spot.
I like technology in general. I work with sites now that all have a client/server healthcare system that is closed, but provides a very high end reporting system and the ability to write all input to an external data repository (SQL 2000 at this point).
The backend is old and derived from MUMPS.
I'm not a NBMer as you'd like to believe, but the move to Windows in the mid to later 90s was a step forward for certain in many ways. Linux was not usable at that point as an out of the box solution like Windows.



Your second paragraph provided an unsupported personal opinion comparing the secureness of Microsoft's Vista, a generalized Linux, and Apple's OS X.

Well, ask Charlie Miller who chose OS X in pwn2own because of OS X not having any built in security and he owned it very quickly. He didn't want to try Vista due to the layered built in security, or Linux. I guess I'm not positive how much "built-in" security Linux has, but just go read the white papers on Vista's built-in security. It's security in depth model. I really have to provide proof of common knowledge?




Your third paragraph rambles on about how secure you think Internet Explorer 8 is when various of its features are active.

Your concluding paragraph provides a left-handed acknowledgement that "'free' software" will one day take the largest market-share but refuse to acknowledge that Linux will be in that mix. Finally, you disrespect all computer users who are not technically computer literate, and disparage Linux as a desktop operating system.

However, you failed to respond to tmsbrdrs's points and your own premise, and lost the debate!

You are serious aren't you? Is this your first visit here? You've not witnessed the blog after blog that has nothing to do with Windows that morphs into ABM sentimets flying everywhere? I thought it was site policy to do so!
But I keep forgetting, it's only if you disparage microsoft that it's valid and "legal".

Linux was implied in the "free software" statement. Don't be such a baby. Dang, my post really worked you up didn't it. happy

Well, considering the Linux zealots here, and there are hundreds of them, all disparage Windows users with terms such as "sheeple" and it goes downhill from there, all I can say is you are crazy.
All of MS, it's employees and users are disparaged on this site daily by juvenile-like users who just can't get over their MS bias and talk like objective adults.

What I said was not in any way disrespectful of anyone, just the truth. There are many users who are not technically minded and who do not know of the dangers on the internet.
My point was the people who are lured into social engineered type attacks would certainly do so on linux just as easily as on Windows.
But we have absolutely no precedence of that on the desktop from which to compare.
What, reality is an insult to you?

Chill out man....quite drinking whatever koolaide you are obviously drinking.

  • Flagged
0 Votes
+ -
@tmsbrdrs your answer and a request.
xuniL_z 23rd Aug 2009
Bing "Linux botnets". If you don't find where independent studies have shown the root-kitted linux boxes ebay and former WM security head discovered, which were victims of phishing attacks, are still a problem due to continuing vulnerabilities and still occurring, you've only given a cursory look.
And of course the worm hitting routers with a Debian variant embedded linux is occuring this year. Now please don't blame it on the lack of passwords or strength of such and it's all the user's fault, less you are willing to say the same for Windows problems.



While you are at it, just for fun, Bing "FAA Linux" and you'll find that they were a Unix shop that has moved wholesale to Linux in 2006. Those identities stolen at will occurred in this past year I believe, along with other problems that caused flight delays.


Now give me proof that FF loads pages twice as fast as IE8.

And finally this blog is about none of that.
It's about the fact that IE8's site filter is far more successful in finding and blocking users from bad sites than the rest of the browsers.
Unless you are going to say that NSS Labs is a company willing to wh*re itself out to anyone and give false results, I think it's safe to say this one aspect of IE8 is indeed superior.

I find it hard to imagine you or anyone is unwilling to concede anything to MS software at any time. That kind of bias and subjective treatment of all blogs related to Microsoft is one main reason zdnet.com talkbacks are usually worthless.
  • Flagged
0 Votes
+ -
And why was my (respectful) response to it taken down?

Just goes to show who pays ZDNet's bills. Or some of the key ZDNet (Microsoft?) employees' bills.....

Once again, if Linux users spent as much time crowing about Windows botnets as Zuny does about Linux's FIRST botnet, there would be no other discussions here.

(from Zuny's link, if you're going to take my post down again, ZDNet, at least have the decency to take down the post that furnished the link)

http://www.eweek.com/c/a/Security/The-First-Linux-Botnet-626424/
The First Linux Botnet

They're calling it the first botnet designed for broadband equipment and routers, and that it is. But it's also the first of something else: Psyb0t is the first Linux botnet.

http://boycottnovell.com/2009/03/19/bbc-windows-botnets-fiasco/
BBC Unable to Defend Windows Botnets Fiasco

http://boycottnovell.com/2009/01/28/windows-botnets-my-barack-obama/
Windows Botnets Go Out of Control, Obama Web Site Delivers Windows Malware
0 Votes
+ -
@xuniL_z
tmsbrdrs 26th Aug 2009
I've Googled those exact terms. What I've found is a router and broadband equipment botnet (not set up as limited user or using any type of security measures found in 99.99999999999999999999999999999999999% of Linux distros) and a claim reported by theRegister.com that lots of spam was coming from Linux based distros in 2007 which was refuted by techrepublic.

I also looked up FAA Linux. None of the links pointed to anything which would tie in identity theft with a flaw in Linux.

As for my claim that Firefox loaded pages more quickly than IE8 on her machine. I invite you to come see her machine in person. If you can't, just let me know. I'll get a video camera so you can see the evidence but I'm sure you'll claim it was staged.

For a little bit of evidence though, here are a few links to check out.
http://www.betanews.com/article/Firefox-35-Beta-4-beats-IE8-in-Microsofts-own-load-times-test/1241027112
http://www.codexon.com/posts/firefox-3-5-rc-vs-ie8-chrome-and-opera-benchmarks
http://www.favbrowser.com/safari-4-vs-chrome-2-vs-opera-10-vs-firefox-35-vs-opera-964-vs-firefox-3-vs-ie8-7/

I take it you'll argue with a few links. Hopefully other people make better arguments than you did.
0 Votes
+ -
@tmsbrdrs I have to disagree.
xuniL_z 1st Sep 2009
There are links out there explaining that the FAA moved from Unix to Red Hat Linux in 2006. You can see the case study on Red Hat. You can read it in a number of other links as well.
If you found one that said they were only "considering" a move from Unix, then it was obviously before it happened.
I'm not going to post the links again where it stated how much money they saved and what steps were involved to move from Unix to Red Hat Linux. One link even gives details quoted directly from someone that worked on the project and how he performed server upgrades.

As for linux botnets. There are Linux botnets. In fact, there are several sites that show evidence that Linux is still being hit.

I mean I gave you the link about the stolen SSIDs. That piece went on to say that after getting on the linux box, kernel vulnerabilities were used to gain root access.
This was quite recent.
Linux has several weak spots. Mots Linux users are techies and block these holes. But there are those that haven't and got slammed.
The zdnet blog I posted about Ubuntu servers getting hacked to attack other servers were the fault of the Ubuntu.org people themselves.

http://blogs.zdnet.com/security/?p=453

So if those who maintain the servers that are used by the Ubuntu developers got caught with their pants down, how many other sites do you think this has happened to? This was basically a botnet. These machines were basically root-kitted to attack other machines.
What do botnets do?

But there are wider scale linux botnets out there. And recently routers with embedded linux have been turned into a botnet.

I'm sorry but Linux is not perfect and it's not even used by the Billion that use windows and are not computer techies. Linux has vulnerabilities, that is a simple fact. You give a billion people Linux and somehow all of the holes are going to be plugged? somehow they will figure out how to install AppArmor and do Linux Admin, which is a job even for one client. I don't think so TMSBRDRS. To imagine otherwise is just delusional, and I don't mean that in a bad way, just that it's the truth of the matter.

thanks.
0 Votes
+ -
Why Indeed?
sirpaul1 21st Aug 2009
IE8 vs. Firefox3.07. How about IE8 vs. FF3.5 or FF3.07 vs. IE7. Apples to apples (excuse the analogy).
0 Votes
+ -
Sounds like
rMatey 25th Aug 2009
a phoney story to me.... make up the numbers and then print the story.
0 Votes
+ -
Well I guess according to these results
Michael Kelly 19th Aug 2009
Non-IE users are more gullible than IE users, but otherwise IE and Firefox are statistically tied.
0 Votes
+ -
They probably figure since they're not running IE, they're safe from everything. That's pretty much what they've been told by the tech media, so why shouldn't they believe it?

Carl Rapson
0 Votes
+ -
That's certainly a good hypothesis
Michael Kelly 19th Aug 2009
It's as good as any reason I can think of, unless of course the numbers are stacked.
Excellent. Noted and filed away for the day IE runs on
something other than Windows.
That is good news and I don't doubt these results one bit. Microsoft Internet Explorer gives you a lot of control over your internet browsing. Just go to Tools then Internet Options, and you have a wide array of choices to choose from. You have security zones for those safe sites and not so safe sites. You can tell it which items you want it to display, whether you should be prompted for scripts and the such. My IE8 is set to prompt me whenever something other than test is loaded, so any flash or multimedia it alerts me first with a yellow bar across the top. That is pretty good security.
0 Votes
+ -
Sorry Love
gnesterenko 19th Aug 2009
But if they re-ran that with proper Firefox protections (Adblock and Noscript plugins), IE wouldn't come close. Yes it does have powerul options for security, but most folks don't know how or won't use them. Noscript/adblock on the other hand are very easy - install and if you know the website is safe, allow the scripts to go through. No reason to unblock any ads though - why would you want to see them anyway? (although certain sites with immoral web masters have their pages designed in such a way that if the ads don't show - no content loads at all. Highly unscrupulus behavior, but what are you gonna do?)

"The views expressed here are mine and do not reflect the official opinion of my employer or the organization through which the Internet was accessed."
0 Votes
+ -
well...
davidhite 19th Aug 2009
This is not about plug ins. You might install
them, but most people click the blue e or orange
fox to go online, don't think the trick out the
browser. I think the best browser is the one that
by default is the safest(before any changes or
plug ins)
0 Votes
+ -
That may be the case
Loverock Davidson 19th Aug 2009
I've never used noscript but have used adblock. But I'm just saying, IE does allow a fair amount of control over what sites you can access and what content can be accessed.
0 Votes
+ -
I Use NoScript
mdsock@... 19th Aug 2009
And the lack of it or something comparable for IE (so far as I know, anyway) is the main reason I rarely use that browser. I don't trust Microsoft on its own to secure my OS. Just as I don't trust Mozilla on its own to secure my browser (I also use NetCraft, AdBlock and other security enhancements). It is important to have a browser that's as safe as possible without add-ins and minimal configuration, for those who just don't know how or can't be bothered. So it's good to see that IE is improving. But I agree with those who consider any studies sponsored by a vendor whose product performs the best to be suspect. It is much safer to live by guilty-until-p-oven innocent in those cases. And based on history, well justified.
0 Votes
+ -
Since you mention NoScript...
JCitizen Updated - 19th Aug 2009
I don't feel guilty in mentioning Spyware Blaster by Javacools. It only blocks active X and uses a host file pretty similar to AdBlock Plus.

I wonder if AdBlock Plus has an anti-tamper mechanism like SpywareBlaster?

Don't worry, I don't work for Javacools; I just hate malware to pieces!! Besides,it is free too, but just not for the auto updater - I have to give Mozilla kudos for that.

I turn my clients to AdAware AdWatch and/or MBAM for the cheap lifetime license to block other malware exploits like java and adobe. I don't know why they don't find NoScript simple to use; I guess they just want fulltime blocking so they can get functionality without having to fuss with giving permission all the time.

Personally I like Mozilla and trade off whenever something on one won't work on the other. I don't blow through alerted page blocks however. Mozilla even has a site-adviser better than McAfee's, if I could just remember the name of it!
0 Votes
+ -
Mozilla Site Adviser
sirpaul1 19th Aug 2009
WOT = Web Of Trust
0 Votes
+ -
That'll work!...
JCitizen 20th Aug 2009
The one I was trying to think of was better rated by TechRepublic and CNET users though.

It reportedly kept up with new conditions more frequently.
0 Votes
+ -
Re:Since you mention........
Disgruntled M$ User 20th Aug 2009
Possibly the WOT- Web Of Trust ad on(site adviser)
0 Votes
+ -
Thank you very much!...(nt)
JCitizen 20th Aug 2009
.
0 Votes
+ -
Typical Linux solution...
Marty R. Milette 19th Aug 2009
...disable anything that can possibly do anything. Render the product virtually useless -- and it will likely be pretty safe.

Microsoft products offer POWER -- and with power comes some degree of responsibility.

If you're so paranoid -- take your computer -- disconnect the power and every external connection and bury it in a mine shaft. It should be pretty safe then. wink
Great!!! thanks for sharing this information to us!
seslisohbet seslichat

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix