Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

Re: New IE flaw and exploit sites/migration to non-MS browser

Subject: Re: New IE flaw and exploit sites/migration to non-MS browser
Date: Tue, 4 Apr 2006 13:17:05 -0400
"Thor (Hammer of God)" <thor@hammerofgod.com> wrote on 04/04/2006 05:49:18 
AM:

I got a couple of emails regarding this... I was referring to the 
granular
control over each individual configuration setting one may set for IE 
via
Group Policy, not just "deploying" the install.

Hey there, oh merciful and mighty Thor ;)

I understand what you are saying, and since many intelligent people are 
hesitant to defend the positive truths of Microsoft software, it's good 
that we have your voice to help redirect discussions.

In the end, it boils down to a business decision.  IE has some compelling 
reasons for use (even beyond the 'it came on the desktop' which I so tire 
of hearing).  Firefox has different compelling arguments.  While we nerds 
like to pick one which suits our particular liking and defend it with all 
the blood and flesh in our being, there are specific reasons for any 
particular company or individual to choose one or the other.  Since 
management relies on us to share the benefits and costs of each, it is 
good to have both sides represented.

While I might like to choose Firefox for its relative speed in patching, 
extensions, and cross-platform capabilities (and relatively low target 
profile), the company doesn't necessarily see the value in changing 
standards.  If a company has invested a great deal of development time and 
money on apps which only support IE (regardless of how reprehensible that 
may be), it may not make as much sense.  It has to be a business decision. 
 Heck, a friend's (relatively large) company is still using WEP for 
wireless in some areas simply because it would cost $300k to replace their 
equipment to support PEAP or WPA.  How dare they! ;)

Security is about measured risk, increased deterrence and difficulty of 
being 'had'.
Not that I'm telling you anything new. 

Matt
ps. May ye be a hef-n-hour in heaven 'fore the Devil knows yer dead.

---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>