RE: New IE flaw and exploit sites/migration to non-MS browser

At Friday, March 31, 2006 3:08 PM, Susan Bradley, CPA aka Ebitz - SBS
Rocks [MVP] wrote:

> Is it IE that's insecure?  Or how the workstations are setup in the
> first place?

Both. I remember back to using IE version 1 and having to maintain web
developer desktops with multiple versions of IE and Netscape. IE/Windows
has always had more insecure defaults, more bugs and vulnerabilities,
and caused more problems than any of the other browsers.

In hindsight, Windows 2000/XP/2003 should never have been released while
effectively requiring users to be local admins on the box (and despite
what the official guidelines say, there are too many cases of even
Microsoft software assuming that you're local admin to hide the fact
that these platforms have NOT been designed with LUA in mind).

This problem bites the users of any browser, and adjusting current
versions of Windows to run LUA is difficult, frustrating, and expensive
in time. A lot of smaller companies just don't have the time or
knowledgeable resources to do it properly -- and the OS should be doing
it for them.

-- 
Devin L. Ganger                    Email: deving@3sharp.com
3Sharp LLC                         Phone: 425.882.1032 x 109
15311 NE 90th Street                Cell: 425.239.2575
Redmond, WA  98052                   Fax: 425.702.8455
(e)Mail Insecurity: http://blogs.3sharp.com/blog/deving/

---------------------------------------------------------------------------
---------------------------------------------------------------------------