Re: [WEB400] Re: New IE security advice from Microsoft

[Anton Gombkötö <gombkoetoe@xxxxxxxxxx>]

Hi Hans,

> As someone else suggested, the best advice that MS could have given
> would be to uninstall IE and use some alternative browser like
> Mozilla or Opera. But we all know how likely that is.

But the whole issue about entering the links, because they can be
faked in the address line in IE (and some others, too), is almost the
same as a link looking proper and with JavaScript's onClick the page
does whatever it wants, e.g. opening a window with another address but
without address bar, so the user can't even notice.

That would be the same in many other browsers, too, wouldn't it? And
it is a way chosen by many more or less reputable sites.

Stepping into someones shop is dangerous. He might try to sell you
rubbish at a much too high price. It's pretty much the same in the
internet. Await the worst, then you can only be surprised in a
positive way. (The problem with that rule is that i imagine things not
bad enough in the first place :-)

I don't want to defend M$, neither do they have the need for my
efforts nor do i think they deserve it, but this whole thing implies
to the reader that clicking on a link in a non-M$ browser is safe. It
might be safer, because they invested more than marketing in security
thoughts, but it isn't safe.

0.02 Euro

-- 
Mit freundlichen Grüssen / best regards

Anton Gombkötö
Organisation und Projektleitung

Avenum Technologie GmbH
Wien - Salzburg - Stuttgart
http://www.avenum.com