RE: IE is just as safe as FireFox

["Todd Towles" <toddtowles () brookshires com>]

The first patch for ADODB.stream was just a killbit..and the killbit
only stopped the current attack vector...in a manner of seconds, there
was a second exploit that passed the so called first patch. Stupid, they
think everything is as stupid as their main market.

The problem with IE is its connection to the OS...if you break IE you
break the OS...Microsoft can't clean up the browser without breaking the
OS...then they would have to do a complete secure rebuild. Ohhh..we
wouldn't want to do that..lol 

> -----Original Message-----
> From: full-disclosure-admin () lists netsys com 
> [mailto:full-disclosure-admin () lists netsys com] On Behalf Of Des Ward
> Sent: Friday, November 12, 2004 2:39 AM
> To: full-disclosure () lists netsys com
> Cc: Ring-of-Fire () yahoogroups com
> Subject: Re: [Full-disclosure] IE is just as safe as FireFox
>
> Other browsers may have problems, and often do (In the case 
> of Firefox say) but the time to respond is key here. MS have 
> a real problem going that extra mile when it comes to 
> patching against variants of a vulnerability (ADODB.stream, 
> shell: etc).
>
> Mosl software has vulnerabilities at some stage, it's how you 
> deal with it.
> -----Original Message-----
> From: "Todd Towles" <toddtowles () brookshires com>
> Date: Thu, 11 Nov 2004 15:59:20
> To:"Mailing List - Full-Disclosure" <full-disclosure () lists netsys com>
> Cc:<Ring-of-Fire () yahoogroups com>
> Subject:  [Full-disclosure] IE is just as safe as FireFox
>
> Microsoft's security and mangement product manager (Ben 
> English) says...
>
>  At a security roundtable discussion in Sydney on Thursday, 
> Ben English, Microsoft's security and management product 
> manager, told attendees that IE undergoes "rigorous code 
> reviews" and is no less secure than any other browser. 
>
> "Because IE is ubiquitous, you hear a lot more about it, but 
> I don't think that Internet Explorer is any less secure than 
> any other browser out there," English said. 
>
> http://news.com.com/Microsoft+says+Firefox+not+a+threat+to+IE/
> 2100-1032_
> 3-5448719.html?part=dht&tag=ntop&tag=nl.e433
>
> Can anyone say IFRAME? Lol
>
> -Todd
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
> ---
> Sent via XDAII BlackBerry
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html