我們是電機系的成員，還是注意一下電腦瀏覽器IE容易被入侵的危險比較好 （這也算是電機專業能力的一種）。 這已經是快兩個月前的舊聞了，但是我前不久還是發現有電機系所的高年級學生 還不知道此事，還在用IE上網瀏覽，所以我把此文貼上來提醒大家，德法政府都已經 向大眾警告IE的安全漏洞與危險了，這篇報導完以後也有其他國家的政府在跟進警告了。 如果你還在用IE上網瀏覽，趕快換一種瀏覽器吧！ 我個人習慣使用比較安全的Google chrome或是Mozilla firefox來代替IE。 Google chrome的下載網頁： (縮址：http://tinyurl.com/mq796s) http://www.google.com/chrome/index.html?hl=zh_tw&brand=CHMB&utm_campaign=zh_tw &utm_source=zh_tw-ha-apac-tw-sk&utm_medium=ha Mozilla firefox的下載網頁： http://www.getfirefox.net/ France & Germany: replace your IE (Internet Explorer of Microsoft) with other browsers!! Germany's Federal Office for Information Security issued a warning against all versions of Internet Explorer and recommended that users switch to an alternative such as Firefox or Google's Chrome. http://news.bbc.co.uk/2/hi/technology/8465038.stm France joins Germany warning against Internet Explorer By Jonathan Fildes Technology reporter, BBC News France has echoed calls by the German government for web users to find an alternative to Microsoft's Internet Explorer (IE) to protect security. Certa, a government agency that oversees cyber threats, warned against using all versions of the web browser. Germany warned users on Friday after malicious code - implicated in attacks on Google - was published online. But Microsoft told BBC News that IE8 was the "most secure browser on the market" and people should upgrade. Cliff Evans, head of security and privacy, said that so far the firm had only seen malicious code that targeted the older version of its browser, IE6. "The risk is minimal," he said. For a web user to be affected, he said, they would have to be using IE6 and visit a compromised website. "There are very few of them out there," he told BBC News. However, if this did occur, a PC could become infected with a "trojan horse", allowing a hacker to take control of the computer and potentially steal sensitive information. 'Sophisticated attack' Although the vulnerability has so far been exploited only in IE6, security researchers warned that could soon change. "Microsoft themselves admit there is a vulnerability, even in IE8," said Graham Cluley of security firm Sophos. This terrible piece of PR for Microsoft comes just as the IE browser which had almost total control of the market starts to come under pressure... Rory Cellan-Jones, BBC technology correspondent ...... Following the news, Germany's Federal Office for Information Security issued a warning against all versions of Internet Explorer and recommended that users switch to an alternative such as Firefox or Google's Chrome. The French agency Certa issued a similar warning. "Pending a patch from the publisher, Certa recommends using an alternative browser," it said. The UK government had said that it would not issue a similar warning. However, it said the Centre for the Protection of National Infrastructure (CPNI)was "monitoring the situation" and would "publish further advice if the risks change". Patch path But Mr Evans said that calls to change browsers were "not very helpful". "If you look at other browsers, it's likely they will have other vulnerabilities," he said. The vulnerability was found to be used in an attack on Google He pointed to a report by security firm NSS Labs reportedly showing that IE8 provided better security against phishing and malware than other browsers. "We feel strongly that IE8 is most secure browser on the market," Mr Evans said. His advice was echoed by Mr Cluley. "Switching away will get away from this particular problem," he told BBC News. "But all browsers have security flaws." Mr Cluley said that switching away from IE could create other problems, particularly for companies. "Some web-based applications may not work at all if you're not using Internet Explorer." Microsoft is currently working on a patch for the problem, but a spokesperson said it could not commit to a timeframe. The firm traditionally releases a security update once a month - the next scheduled patch will be ready on 9 February. Expert finds vulnerabilities in Microsoft browser IE- remotely access all of the data on a PC!! Expert finds vulnerabilities in Microsoft browser http://news.yahoo.com/s/nm/20100122/tc_nm/us_microsoft_security By Jim Finkle – Fri Jan 22, 4:26 pm ET BOSTON (Reuters) – A security research firm said it discovered another set of vulnerabilities in Internet Explorer, a day after Microsoft Corp patched the Web browser following a high-profile cyber attack on Google in China. The software maker issued a patch on Thursday to fight malicious software that was used in the attack on Google Inc and dozens of other companies which operate in China. Research firm Core Security Technologies said on Friday that it discovered another set of vulnerabilities in Internet Explorer that hackers can link together and exploit, to remotely access all of the data on a personal computer. "There are three or four ways to conduct this type of attack," said Jorge Luis Alvarez Medina, a security consultant with Boston-based Core, who will demonstrate the vulnerability at the Black Hat security conference in Washington, which begins February 2. A spokeswoman for Microsoft said she could not immediately comment on the matter. Alvarez Medina said hackers can exploit a string of four or five minor vulnerabilities in Internet Explorer, which is used on hundreds of millions of PCs around the world. Although none of the vulnerabilities are serious enough to compromise a machine, a hacker could take control of a PC by exploiting all of them at once, he said. The combination would overwhelm the browser, giving a hacker access to all data on the PC after a user clicks on a malicious link, he said. Alvarez Medina added that he was uncertain whether any hackers had already exploited the weaknesses, which Microsoft has yet to patch. He said that Core was working with Microsoft to find a way to mitigate the risk, but added that he believed other vulnerabilities would crop up even after a solution to these. "It is likely that people will come up with new ones over time," he said. (Reporting by Jim Finkle, editing by Leslie Gevirtz) -- ___ 6@_@9 4| |7 2 5 讓我先想一想...... --

※ 發信站: 批踢踢實業坊(ptt.cc) ◆ From: 118.168.161.34 ※ 編輯: Geigemachen 來自: 118.168.161.34 (03/04 00:57)