Symantec Says There's No Safe Browser

[dbarrow]

http://www.betanews.com/article/Symantec_Says_Theres_No_Safe_Browser/1159217023

By Ed Oswald, BetaNews
September 25, 2006, 4:47 PM

Whether you are using Firefox or Internet Explorer, Maxthon or Opera, there is no "safe" browser. This statement comes from Symantec as part of its twice-yearly Internet Security Threat Report, which showed attackers were no longer primarly focusing on Internet Explorer.

While Internet Explorer remains the most frequently targeted browser, accounting for 47 percent of all attacks, in the first six months of this year more vulnerabilities have appeared in Mozilla Firefox than within IE. 47 flaws were discovered in Firefox, compared with 38 for IE.

"In order to protect against Web browser attacks, Symantec advises users and administrators to upgrade all browsers to the latest, patched versions," Symantec recommended. ...

...Besides the browser findings, Symantec also reported on other malware trends. The overall number of computer flaws rose to 2,249, up 18 percent from the second half of last year. This was a record for vulnerabilities discovered, said Symantec. Most of them -- 69 percent -- were Web-based issues. ...

[Seth]

"which showed attackers were no longer primely focusing on Internet Explorer."

That's exactly what I've been saying about Firefox as well as Linux based operating systems. In other words, it's not a matter of the operating system or browser, it's whether or not they're being targeted. As other browsers and operating systems become more popular, then with hacker practice they will be easily compromised.

[Tortanick]

Once again I object to you're point that it is only the popularity. Yes they will have virues but on most linux distros you will NEVER see a remote attack from nowhere like you do within minuets of running an unpached windows

However I'd like to point out a couple of flaws in the implied fact of explorer beating firefox this month:

1) no mention of how critical the flaws are
2) Mozilla is far more open about flaws than MS, chances are MS has swept some under the rug.

[Tortanick]

Here is how I solved cookies:

1) get the cookie button (https://addons.mozilla.org/firefox/1247/) extension
2) restart firefox
3) right click a toolbar and click customise, now put the cookie button on the toolbar wherever you want
4) tools>options>privacy>cookies. Tick Allow sites to set cookies, for the origional site only, set keep cookies to untill I close firefox
5) use cookie button to give stronger permission to sites that need it.

[fleamailman]

I honestly wonder if there is anyone that really believes that there is a browser that is 100% safe, then again whether it is wise to believe so.

[rVidia]

"which showed attackers were no longer primely focusing on Internet Explorer."

That's exactly what I've been saying about Firefox as well as Linux based operating systems. In other words, it's not a matter of the operating system or browser, it's whether or not they're being targeted. As other browsers and operating systems become more popular, then with hacker practice they will be easily compromised.
I agree with Seth. Quoting myself from this (http://kickenhardware.net/forum/showthread.php?t=3126&page=2) thread...."I realize there is much less of a security risk with Linux when compared to Windows, but I just wanted to make you aware that you're still not completely safe. As Linux and any other OS become increasingly popular, there's sure to be an increase in malware as well."

Once again I object to you're point that it is only the popularity.
It is not only popularity, I realize, but also software design (and yes, Linux has an advantage there). But as said, with hacker practice, even Linux can be compromised.

[kelly]

I don't know but I use a Mac mostly for Internet access and email. No AV, No FW, No Anti-Spam. Never had a problem. However I am on dial up. When I more to FIOS later this week, I'll probably turn on the Mac FW.

I don't care if it's security by obsecurity, but it works. It's one machine (actually two - I use different machines for home and office) I don't have to think about when it comes to malware protection.

-td

[Tortanick]

I agree with you rVidia, just not Seth. the key word that sets you apart is that Seth says "easily comprimised" I don't think linux will ever be an easy target.