Server Help :: View topic - New IE Exploit.

Server Help

Trash Talk - New IE Exploit.

K' - Fri Sep 22, 2006 3:29 am
Post subject: New IE Exploit.

http://www.microsoft.com/technet/security/advisory/925568.mspx
Temporary fix: unplug the extension IE uses for rendering VML images.
Type this in the start->run:
regsvr32 -u "%ProgramFiles%\Common Files\Microsoft Shared\VGX\vgx.dll"

Cyan~Fire - Fri Sep 22, 2006 11:05 pm
Post subject:

I think you're the only one here who uses IE.

(Yeah, I know it's probably not true and MGB will post up some stats, but it's pretty close.

)

Bak - Sat Sep 23, 2006 5:23 am
Post subject:

K' wrote:

Temporary fix: unplug the extension IE uses for rendering VML images.

Permanent Fix: Stop using IE

BDwinsAlt - Sat Sep 23, 2006 8:31 am
Post subject:

My grandmother uses IE. She had a bunch of spyware and toolbars and she said my grandfather and uncle spent hours trying to remove it. I suggested firefox, and this is what made me mad when she said, "I don't mess with that kind of stuff." She always thinks I'm gonna mess something up and that I don't know what I'm doing.

Anyways,
FireFox > E.Coli Spinach > IE

The Apache - Sat Sep 23, 2006 8:40 am
Post subject:

haven't you left?

BDwinsAlt - Sat Sep 23, 2006 8:42 am
Post subject:

Continuum, yes. MGBF, no.

K' - Sat Sep 23, 2006 11:55 pm
Post subject:

Yet you urinate in your bed, still.

Animate Dreams - Sun Sep 24, 2006 12:33 am
Post subject:

I still use IE. I should add that I never, ever get any viruses or spyware. If you get malware, don't blame your browser, that's how you get stupid people. I would venture that many FireFox users don't know how to properly protect themselves from viruses and manage to get them anyway. No amount of firewalling(save from blocking the whole internet) will stop you from getting malware if you don't know what you're doing.

Anyway, I've been using a mixture of Opera and IE, Opera for its funness and IE for what browsers like FireFox and Opera can't handle. But now that I've just found Maxthon, I don't know that I'll touch either ever again....

K' - Sun Sep 24, 2006 12:54 am
Post subject:

FireFox is actually full of exploits, people just don't bother to exploit them.

It's no different from windows vs linux; one is common spread by a corporate and people love to hate, the other is so called champion holding the banner of the people; guess which one is going to get picked on?

Like you've said, the problem is never in the browser, OS, router hardware, your AVS of choice or otherwise, it's always all about the biggest security compromise any system has ever known: the end-luser.

The Apache - Sun Sep 24, 2006 2:52 am
Post subject:

K' wrote:

FireFox is actually full of exploits, people just don't bother to exploit them.

LOL

Muskrat - Sun Sep 24, 2006 1:41 pm
Post subject:

A Session Manager extension/feature is a must for any browser I'm going to use.

I've been trying out Flock. It's a lot like firefox but has a couple new things that I like.

The Apache - Sun Sep 24, 2006 3:33 pm
Post subject:

Flock seems pretty nice. i'm gonna try it out now.

BDwinsAlt - Sun Sep 24, 2006 8:12 pm
Post subject:

I tested flock. It did not allow viruses on my computer. With IE my antivirus detects virus at a certain website, but with FF and Flock it doesn't. Flock looks like a netscape/firefox spawn because a lot of the message boxes look the same. I like flock, but i'll continue using firefox due to the extentions.

Mine GO BOOM - Sun Sep 24, 2006 9:05 pm
Post subject:

BDwinsAlt wrote:

Flock looks like a netscape/firefox spawn because a lot of the message boxes look the same. I like flock, but i'll continue using firefox due to the extentions.

If you look at Flock's "extensions" they are just rebanded Firefox extensions. Such as the weatherfox. I'd just recommend using Firefox, anything Flock can do that you like, Firefox already has an extension for it. At least Flock is open source, so you know it isn't like another browser that recently popularized and then shot down because it is just pure adware.

Oh, and Web 2.0

D1st0rt - Sun Sep 24, 2006 11:01 pm
Post subject:

Will it add those subtle diagonal lines to everything for you?

(hmmm that might be another interesting filter to use with squid)

edit: AND WHY DID FORUMS DIE FOR LIKE 10 MINUTES THE FIRST TIME I TRIED TO SUBMIT THIS

Mine GO BOOM - Sun Sep 24, 2006 11:47 pm
Post subject:

D1st0rt wrote:

AND WHY DID FORUMS DIE FOR LIKE 10 MINUTES THE FIRST TIME I TRIED TO SUBMIT THIS

The server is on a virtual machine. Which means that I can do anything to it. But sometimes, someone else on the same machine likes to thrash the hard drive with something.

Code: Show/Hide

18:15:01 CPU %user %nice %system %iowait %idle
18:25:01 all 0.28 0.00 0.05 1.77 97.90
18:35:01 all 0.57 0.00 0.08 0.44 98.91
18:45:01 all 0.86 0.00 0.10 0.77 98.27
18:55:02 all 3.27 0.00 1.65 1.19 93.90
19:05:02 all 4.17 0.00 1.86 14.01 79.96
19:15:02 all 2.20 0.00 0.95 27.87 68.98
19:25:01 all 0.41 0.00 0.06 1.07 98.45
19:35:01 all 1.03 0.00 0.12 2.74 96.10
19:45:01 all 0.85 0.00 0.11 2.15 96.89
19:55:01 all 0.46 0.00 0.05 1.28 98.21
20:05:01 all 1.65 0.00 0.13 3.36 94.86
20:15:01 all 0.20 0.00 0.05 0.46 99.30
20:25:01 all 0.30 0.00 0.05 0.23 99.42
20:35:01 all 0.41 0.00 0.07 0.08 99.44
Average: all 0.69 0.00 0.11 1.93 97.27

Generally, my IO Wait is less than 1%, such as:

Code: Show/Hide

07:15:02 CPU %user %nice %system %iowait %idle
07:25:01 all 0.50 0.00 0.07 0.59 98.85
07:35:01 all 0.31 0.00 0.05 0.38 99.25
07:45:01 all 0.32 0.00 0.05 0.65 98.98
07:55:01 all 0.96 0.00 0.09 0.67 98.28
08:05:01 all 1.15 0.00 0.06 0.72 98.06
08:15:01 all 0.27 0.00 0.05 0.60 99.08
08:25:01 all 0.38 0.00 0.05 0.36 99.22
08:35:01 all 0.31 0.00 0.04 0.32 99.33
08:45:01 all 0.18 0.00 0.04 0.27 99.51
08:55:01 all 0.29 0.00 0.05 0.54 99.13
09:05:01 all 1.13 0.00 0.06 1.14 97.68
09:15:01 all 0.21 0.00 0.04 0.16 99.60
09:25:01 all 0.48 0.00 0.07 0.30 99.15
09:35:01 all 0.44 0.00 0.06 0.20 99.30
09:45:01 all 0.71 0.00 0.25 1.32 97.71
09:55:01 all 0.47 0.00 0.07 1.56 97.89
10:05:01 all 1.45 0.00 0.08 0.37 98.11
10:15:01 all 0.36 0.00 0.05 0.92 98.67
10:25:01 all 0.52 0.00 0.04 1.07 98.36
10:35:01 all 0.56 0.00 0.06 0.85 98.54
10:45:01 all 1.10 0.00 0.11 1.24 97.55
10:55:01 all 0.79 0.00 0.11 0.63 98.47

All produced by sar. Times are in PST (I moved a bit farther west).

The Apache - Mon Sep 25, 2006 2:23 am
Post subject:

BDwinsAlt wrote:

I tested flock. It did not allow viruses on my computer. With IE my antivirus detects virus at a certain website, but with FF and Flock it doesn't.

that did not make any sense.

Bak - Mon Sep 25, 2006 2:26 am
Post subject:

when you go to a site and auto-download a virus / spywhere, some virus programs will tell you and block it. He means when he uses IE and goes to website X his virus program intercepts the virus, but for FF or Flock it doesn't. Now it could mean his virus program doesn't work with FF or Flock or, more likely, that IE has a vulnerability not present in FF/Flock.

K' - Mon Sep 25, 2006 4:38 am
Post subject:

Or
The virii is targetted-made after IE, and were it to ben adapted for FF it would strike as well.

Or
He's a dimwit who doesn't know how to properly configure his browser security and should have no business operating a computer.