This article at eWEEK.com is the reason why I’ve switched to using the Mozilla Firefox web browser for everything except a few web applications at work which only work with MSIE.
Read the article, but the gist of it is that a fully up-to-date Windows system, if browsing a malicious site containing the exploit, can be made to execute arbitrary code that the attacker has intended on your system. Quoting from the article:
The proof-of-concept exploit, which is available from the FrSirt site, currently launched the Windows Calculator (calc.exe) but can be easily modified by malicious hackers.
What I’d really like to see is someone modifying the proof-of-concept exploit to instead fetch a copy of Firefox, perform an unattended install of it, then rename IEXPLORE.EXE (the MSIE executable) to something else and replacing it with a copy of FIREFOX.EXE. Of course, I’m sure anyone who did such a thing could go to jail because there’s no distinction made between “good hacking” and “bad hacking” in our lovely legal system. You know, the same legal system that lets killers walk free but makes hackers go to jail.
![[RSS]](http://dossy.org/wp/wp-content/themes/dossyblog-10/art/feed-icon-16x16.png){kind=icon}
November 19th, 2009 at 8:35 pm
xy: If you tell me what distribution and version you're interested in, I can try building x86_64 binaries.
November 19th, 2009 at 8:22 pm
Ash: You're right, that's the only actual meaningful measurement - one person's performance before and after. It makes sense that Dvorak ...
November 19th, 2009 at 11:35 am
Has anyone successfully created a x86_64 build of convcharcount.la and convcharcount.so? I'd love to use this plugin, but not ...
November 19th, 2009 at 4:01 am
[...] The original posting is from Dossy’s Blog: What is GIMP’s equivalent of Photoshop’s Median filter? [...]
November 19th, 2009 at 1:30 am
I think the only way to solve this argument is for as many people as possible to list their typing ...