If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(The Consumerist)   Last week: Oh noes, IE has major, gaping security hole. This week: Um... still waiting for Microsoft to do something. Still waiting... still... waiting... (submitted using Chrome)   (consumerist.com) divider line 56
    More: Followup, internet slang, Internet Explorer, Microsoft, PC users, targeted attacks, University of Michigan  
•       •       •

945 clicks; posted to Geek » on 30 Apr 2014 at 10:02 AM (25 weeks ago)   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»



56 Comments   (+0 »)
   
View Voting Results: Smartest and Funniest

First | « | 1 | 2 | » | Last | Show all
 
2014-04-30 09:13:40 AM  
Federal Government: You should not use IE until this is fixed
My job (Federal Government contractor): You can only use IE

/some of our programs only work with IE
//and it has to be IE 6 (10 years old)
///head explodes
 
2014-04-30 09:46:53 AM  
Wow.  I'm shocked.  SHOCKED, I SAY

/FF with NoScript and ABP
 
2014-04-30 09:48:05 AM  

Walker: /some of our programs only work with IE


Oh yeah.  We have web apps we have to access out there in the wild that will ONLY work with IE.  And even then, it's squirrelly.  And it's with HIPAA information, too.

God love those people...
 
2014-04-30 10:05:21 AM  
I'll only use IE for work related purposes (I work in a hospital, most of our stuff is Cerner driven and I'm not sure if it'll function properly in Chrome or FF) for for all other browsing/anything I know I can use Chrome for, I use Chrome.

How is Firefox these days, aside from being confirmed to not be homophobic?
 
2014-04-30 10:11:44 AM  
good luck, I'm behind seven VMs!
 
2014-04-30 10:11:51 AM  
Disable Flash and you are fixed. And no more limited than half the phones and tablets out there...
 
2014-04-30 10:13:27 AM  

Crotchrocket Slim: How is Firefox these days, aside from being confirmed to not be homophobic?


Better than Chrome in regards to download plugins....maybe other plugins, but that's about it.  I only use Firefox when I need to use DownThemAll to bulk download stuff.
 
2014-04-30 10:18:24 AM  

skeevy420: Crotchrocket Slim: How is Firefox these days, aside from being confirmed to not be homophobic?

Better than Chrome in regards to download plugins....maybe other plugins, but that's about it.  I only use Firefox when I need to use DownThemAll to bulk download stuff.


Chrome still doesn't have an adequate equivalent to the NoScript/AdBlockPlus combo

FWIW, IE is pretty quick and doesn't gnaw on resources like FF these days, but without adequate plugin/add-on support, it will never grow like Chrome or Firefox, or even Opera
 
2014-04-30 10:19:15 AM  

ex0du5: Disable Flash and you are fixed. And no more limited than half the phones and tablets out there...


A thousand times this.  It's not an IE bug it's about the four thousandth flash bug this year.
 
2014-04-30 10:20:27 AM  
the best part about this is that windows RT only ships with IE, and you can only run IE on RT.
 
2014-04-30 10:22:36 AM  

olapbill: the best part about this is that windows RT only ships with IE, and you can only run IE on RT.


RT does not support Flash.
 
2014-04-30 10:24:37 AM  
Man, I can't stand IE.  It seems like every week Microsoft is tryi..........Google Chrome (not responding)...........

/FML
 
2014-04-30 10:24:42 AM  

bhcompy: olapbill: the best part about this is that windows RT only ships with IE, and you can only run IE on RT.

RT does not support Flash.


But he'll save everyone of us!
 
2014-04-30 10:25:55 AM  

bhcompy: olapbill: the best part about this is that windows RT only ships with IE, and you can only run IE on RT.

RT does not support Flash.


..and it does.
 
2014-04-30 10:27:59 AM  

bhcompy: RT does not support Flash.


Yes it does
 
2014-04-30 10:30:03 AM  

bhcompy: skeevy420: Crotchrocket Slim: How is Firefox these days, aside from being confirmed to not be homophobic?

Better than Chrome in regards to download plugins....maybe other plugins, but that's about it.  I only use Firefox when I need to use DownThemAll to bulk download stuff.

Chrome still doesn't have an adequate equivalent to the NoScript/AdBlockPlus combo


I'm running Adblock + ScriptSafe on Chrome. Is ScriptSafe not as good as NoScript? I haven't used FF in awhile.

Also, my work deployed some sort of patch/workaround to all computers. I'm not sure what it does but I assume it blocks all flash under IE or something.
 
2014-04-30 10:32:06 AM  

bhcompy: skeevy420: Crotchrocket Slim: How is Firefox these days, aside from being confirmed to not be homophobic?

Better than Chrome in regards to download plugins....maybe other plugins, but that's about it.  I only use Firefox when I need to use DownThemAll to bulk download stuff.

Chrome still doesn't have an adequate equivalent to the NoScript/AdBlockPlus combo

FWIW, IE is pretty quick and doesn't gnaw on resources like FF these days, but without adequate plugin/add-on support, it will never grow like Chrome or Firefox, or even Opera


Firefox fixed it's resource hogging ways a few versions ago. I currently have ten tabs open and the usual extensions installed and am using about 350 Megs of RAM.

The current version rewrote the user interface and is suddenly snappy on even on a resource starved netbook.

Moving to a fast release cadence has yielded benefits.
 
2014-04-30 10:37:35 AM  

olapbill: bhcompy: olapbill: the best part about this is that windows RT only ships with IE, and you can only run IE on RT.

RT does not support Flash.

..and it does.


the_sidewinder: bhcompy: RT does not support Flash.

Yes it does


Sorry, that is a rather new development.
 
2014-04-30 10:39:15 AM  

SkittlesAreYum: Is ScriptSafe not as good as NoScript?


It can't be until Chrome gets a more full featured extension framework.

Also, NoScript does a lot more than just turn off Javascript per domain.
 
2014-04-30 10:46:24 AM  

BullBearMS: Firefox fixed it's resource hogging ways a few versions ago. I currently have ten tabs open and the usual extensions installed and am using about 350 Megs of RAM.

The current version rewrote the user interface and is suddenly snappy on even on a resource starved netbook.

Moving to a fast release cadence has yielded benefits.


It's still all under one process, which I'm still not fond of, as it doesn't recycle the memory/process when you close a tab, like it will in Chrome and IE.

If I close all my tabs but one in Chrome or IE, I'm left with a few processes running 10s of MB.  If I call all but one in FF I'm still left with 1 process running 340mb(currently), but if I close FF and reopen it to the same webpage(which I just did), it shrinks to 250mb.
 
2014-04-30 11:00:01 AM  

bhcompy: BullBearMS: Firefox fixed it's resource hogging ways a few versions ago. I currently have ten tabs open and the usual extensions installed and am using about 350 Megs of RAM.

The current version rewrote the user interface and is suddenly snappy on even on a resource starved netbook.

Moving to a fast release cadence has yielded benefits.

It's still all under one process, which I'm still not fond of, as it doesn't recycle the memory/process when you close a tab, like it will in Chrome and IE.

If I close all my tabs but one in Chrome or IE, I'm left with a few processes running 10s of MB.  If I call all but one in FF I'm still left with 1 process running 340mb(currently), but if I close FF and reopen it to the same webpage(which I just did), it shrinks to 250mb.


So close it, open it, and then restore your session every once in a while.

Sorry, but Chrome is just too much of a memory hog when you open many tabs, as pretty much everyone does now.
 
2014-04-30 11:06:41 AM  

BullBearMS: Chrome is just too much of a memory hog when you open many tabs, as pretty much everyone does now.


Ugh, this is what my wife does. She'll have 20 tabs open at a time, then complain about how things are 'running slow' and blame her laptop processor.
 
2014-04-30 11:30:40 AM  

Lanadapter: good luck, I'm behind seven VMs!



Voice Mail can't protect you now!
 
2014-04-30 11:33:02 AM  

xanadian: Walker: /some of our programs only work with IE

Oh yeah.  We have web apps we have to access out there in the wild that will ONLY work with IE.  And even then, it's squirrelly.  And it's with HIPAA information, too.

God love those people...


You too, eh? I'm lucky that our organization installs Firefox and Chrome as alternatives. But web apps are only supported under IE 8(for example, EPIC). HIPAA data passing through a browser with a very nasty security hole...hooray.

Oh and subby, don't get too comfortable with Chrome.

/Chrome user
 
2014-04-30 12:04:34 PM  

olapbill: bhcompy: olapbill: the best part about this is that windows RT only ships with IE, and you can only run IE on RT.

RT does not support Flash.

But he'll save everyone of us!


DIVE, HAWKMEN!
 
2014-04-30 12:51:14 PM  
Palemoon users laugh at your shenannigans.
 
2014-04-30 12:55:58 PM  
In order to be impacted by the recent security announcement you have to have the following three items:

1)      Internet Explorer
2)      Adobe Flash
3)      Access to a compromised website


You can take the advice of the media and stop using Internet Explorer.
                                OR
You can just update Adobe Flash or stop using it.
                                OR
Just monitor what websites are asking you to do and do not allow software to install.


You can also adjust settings in IE that run it in 64 bit mode which prevents access to the old vml dll files
 
2014-04-30 01:04:46 PM  

ex0du5: Disable Flash and you are fixed. And no more limited than half the phones and tablets out there...


Flash is the one currently known way the weakness can be exploited. This weakness has been in every version of IE since 6, which means it is 10 years old. Are you willing to bank on the fact that Flash is the  only way in?
 
2014-04-30 01:06:11 PM  
Their poor programming habits are legendary. My guess is that you will not see any significant updates to fix this in any less than a month. More likely six months to never, as this is grandfathered bad programming from the very first IE.

natewill: Man, I can't stand IE.  It seems like every week Microsoft is tryi..........Google Chrome (not responding)...........

/FML


Sounds like you need to disable/update some plugins.
 
2014-04-30 01:28:07 PM  

Lt. Cheese Weasel: Palemoon users laugh at your shenannigans.


This.

/so good
 
2014-04-30 02:18:39 PM  

bhcompy: Sorry, that is a rather new development.


Nope, been there since RT launched, but it initially had a published whitelist of sites where Flash was allowed to run (so not just any flash file would play), and IIRC that was removed just over a year ago
 
2014-04-30 02:20:05 PM  

olapbill: bhcompy: olapbill: the best part about this is that windows RT only ships with IE, and you can only run IE on RT.

RT does not support Flash.

..and it does.


What's funny us that RT doesn't support Microsoft's own Silverlight plug-in. I can watch Netflix but not Amazon Prime.
 
2014-04-30 02:36:15 PM  

syrynxx: olapbill: bhcompy: olapbill: the best part about this is that windows RT only ships with IE, and you can only run IE on RT.

RT does not support Flash.

..and it does.

What's funny us that RT doesn't support Microsoft's own Silverlight plug-in. I can watch Netflix but not Amazon Prime.


yeah. As much as I like my Vivo tab RT (with the free keyboard that sucker goes for a full day with no charge) , I think it's time to look at full 8 tablet instead.
 
2014-04-30 02:37:01 PM  
First of all, if you're reading this in Internet Explorer, copy the link, quit the browser and paste it into another one.

Look, moron. If I have already opened the page, the window for infection has come and gone. You don't get viruses by hanging out too long on websites, you get them when the page loads, or when you click on the link for your Tranny Granny vs. Midget pr0n. Secondly, fix your farking servers if you think we're going to get infected by visiting your site.

Users can also turn off Adobe Flash to avoid the hack, which uses a corrupted Flash file to get into a victim's computer.
"The attack will not work without Adobe Flash," security firm FireEye said. "Disabling the Flash plugin within IE will prevent the exploit from functioning."


So why aren't you assholes holding Adobe's feet to the fire?

And following your own link, it would appear that Microsoft HAS addressed the problem.

Our initial investigation has revealed that Enhanced Protected Mode, on by default for the modern browsing experience in Internet Explorer 10 and Internet Explorer 11, as well as Enhanced Mitigation Experience Toolkit (EMET) 4.1 and EMET 5.0 Technical Preview, will help protect against this potential risk.

Consumerist sucks so bad that even when they have a legitimate issue, I can't be bothered to feel angry at whomever they are attacking.
 
2014-04-30 02:42:40 PM  

Walker: Federal Government: You should not use IE until this is fixed
My job (Federal Government contractor): You can only use IE

/some of our programs only work with IE
//and it has to be IE 6 (10 years old)
///head explodes


Don't think you are alone. I work for a publicly traded corporation, and we are IE only (IE 9). God knows how many computers we have, all 50 states and parts of Canada and Mexico. Windows 7 is the OS.
 
2014-04-30 02:43:45 PM  
Using 8.1, I just got a Flash update a few hours ago. I guess that was the patch.
 
2014-04-30 03:09:34 PM  

Unobtanium: Walker: Federal Government: You should not use IE until this is fixed
My job (Federal Government contractor): You can only use IE

/some of our programs only work with IE
//and it has to be IE 6 (10 years old)
///head explodes

Don't think you are alone. I work for a publicly traded corporation, and we are IE only (IE 9). God knows how many computers we have, all 50 states and parts of Canada and Mexico. Windows 7 is the OS.


Hope you didn't have any plans for the next couple of weeks.
 
2014-04-30 03:19:30 PM  

Unobtanium: Walker: Federal Government: You should not use IE until this is fixed
My job (Federal Government contractor): You can only use IE

/some of our programs only work with IE
//and it has to be IE 6 (10 years old)
///head explodes

Don't think you are alone. I work for a publicly traded corporation, and we are IE only (IE 9). God knows how many computers we have, all 50 states and parts of Canada and Mexico. Windows 7 is the OS.


Our big new development a couple of years back (2011/12 mostly, although had a fairly big load of paid enhancements this year) was primarily designed to work and look best on IE6, and a secondary consideration more recent versions of IE, everything else was irrelevant of course as we are B2B software providers, and after 100s of business clients, and many more tenders still yet to see any requirements to even work/be tested with anything else than IE.


/uses Opera 12 (pre-Blink), Chrome as overflow if that has compatibility issues, and IE for testing our software sometimes (I don't do much testing or web development though, so rarely ever gets run)
 
2014-04-30 03:26:11 PM  
It's not like anyone who doesn't already have a virus or two uses IE anymore, anyways.
 
2014-04-30 04:15:08 PM  

BullBearMS: It can't be until Chrome gets a more full featured extension framework.

Also, NoScript does a lot more than just turn off Javascript per domain.


You seem to know a bit about this so I'll ask: I recently replaced NoScript with Ghostery because more and more sites were being rendered completely inoperable.  In your opinion, am I better off putting up with the hassle that comes with NoScript?
 
2014-04-30 04:18:15 PM  

olapbill: yeah. As much as I like my Vivo tab RT (with the free keyboard that sucker goes for a full day with no charge) , I think it's time to look at full 8 tablet instead.


That's what I have too, and I bought an extra keyboard (although the special chargers are another $20) for even more battery life.  When I was in the hospital last fall, it was great to be able to work on full versions of Word and Excel, and watch Netflix.  Then I tried to use a simple text editor I've used for literally over a decade (UltraEdit) and it wouldn't run due to lockdown of unsigned Win32 apps.

I did get a little Toshiba Encore 8" tablet with the full version, but I haven't found myself using it much.  The VivoTab is Skype during the day and Netflix at night, and I haven't found much use for the little full Windows 8 tablet.
 
2014-04-30 05:18:54 PM  

GoldSpider: BullBearMS: It can't be until Chrome gets a more full featured extension framework.

Also, NoScript does a lot more than just turn off Javascript per domain.

You seem to know a bit about this so I'll ask: I recently replaced NoScript with Ghostery because more and more sites were being rendered completely inoperable.  In your opinion, am I better off putting up with the hassle that comes with NoScript?


Ghostery is more about keeping websites from tracking you.

NoScript is more about protecting you from malware.

NoScript is the first extension I install.
 
2014-04-30 05:26:54 PM  
wtf is this, then?

puu.sh
 
2014-04-30 05:44:28 PM  

Lt. Cheese Weasel: .

Hope you didn't have any plans for the next couple of weeks.


Plenty. I mostly use Chrome on my personal computers, but I'll let the IT folks deal with this IE issue on the work machine. I don't have admin rights to my work computer, I can't even install a printer. Not sure what else this latest vulnerability can do
 
2014-04-30 05:58:36 PM  

BullBearMS: GoldSpider: BullBearMS: It can't be until Chrome gets a more full featured extension framework.

Also, NoScript does a lot more than just turn off Javascript per domain.

You seem to know a bit about this so I'll ask: I recently replaced NoScript with Ghostery because more and more sites were being rendered completely inoperable.  In your opinion, am I better off putting up with the hassle that comes with NoScript?

Ghostery is more about keeping websites from tracking you.

NoScript is more about protecting you from malware.

NoScript is the first extension I install.


And Fark is the first place I blacklist, ever since Drew put the Annoyatron at the top of every page begging for my $5. The only time I temporarily allow it, is when I hit the handy, dandy quote button (such as now).

Cuz I guess he didn't care for liter ad revenue?
 
2014-04-30 06:54:50 PM  

natewill: Man, I can't stand IE.  It seems like every week Microsoft is tryi..........Google Chrome (not responding)...........

/FML


i1.ytimg.com

What?
"Google Chrome (not responding)..........."
What's that?
It must have crashed while he was typing it.
Oh, come on.
That's what it says!
But if it crashed, how could he have posted "Google Chrome (not responding)" ?
It's right there, on the screen.
 
2014-04-30 07:22:20 PM  

xxcorydxx: wtf is this, then?

[puu.sh image 850x463]


You are clearly from the future.  Welcome.
 
2014-04-30 07:45:36 PM  

syrynxx: olapbill: bhcompy: olapbill: the best part about this is that windows RT only ships with IE, and you can only run IE on RT.

RT does not support Flash.

..and it does.

What's funny us that RT doesn't support Microsoft's own Silverlight plug-in. I can watch Netflix but not Amazon Prime.


Microsoft doesn't even support future development of Silverlight. It's EOL.
 
2014-04-30 07:47:27 PM  

bhcompy: skeevy420: Crotchrocket Slim: How is Firefox these days, aside from being confirmed to not be homophobic?

Better than Chrome in regards to download plugins....maybe other plugins, but that's about it.  I only use Firefox when I need to use DownThemAll to bulk download stuff.

Chrome still doesn't have an adequate equivalent to the NoScript/AdBlockPlus combo

FWIW, IE is pretty quick and doesn't gnaw on resources like FF these days, but without adequate plugin/add-on support, it will never grow like Chrome or Firefox, or even Opera


You can run ad-block (tracking protection) in IE too. Not as many choices, but easylist is there.
 
2014-04-30 08:00:41 PM  
Cool, let's demand a rushed fix.  I'm sure that will work out great.
 
Displayed 50 of 56 comments

First | « | 1 | 2 | » | Last | Show all

View Voting Results: Smartest and Funniest


This thread is closed to new comments.

Continue Farking
Submit a Link »






Report