main
Report a problem

IE 'unsafe' for 284 days last year

Daniel Fleshbourne   on 05 January 2007 - 16:54 · 29 comments & 8894 views

Advertisement (Why?)
Using IE6 was "unsafe" 284 days last year even for users who patched their systems as soon as Microsoft released fixes. An analysis by the Washington Post's Stuart Krebs revealed that exploit code for critical unpatched flaws in IE6 was available for three-quarters of the time last year.

Even worse, for at least 98 days last year no patches were available for flaws that were been actively exploited by hackers to steal personal data. Firefox users, by comparison, were exposed to critical, unpatched flaws that were actively exploited for just nine days last year. This single period of exposure compares to multiple overlapping periods of vulnerability faced by IE6 users.

View: The full story
News source: The Reg

Post a comment · Send to friend Comments · There are 29 additional comments
#1 guylaroche on 05 Jan 2007 - 17:24
Damn. Viruses/malware/exploits suck.
#2 bmaher on 05 Jan 2007 - 17:38
pfft - this is IE we're talking about, what dya expect?
#3 vetmarkjensen on 05 Jan 2007 - 17:39
I don't use Opera, but in light of what seems to be an excellent history, it would have been nice if they included it in this comparison.
(1 reply) #4 RhythmFlirt on 05 Jan 2007 - 17:57
One world, one word, one love: FireFox
#4.1 DigitalDude on 05 Jan 2007 - 20:36
That would make a good slogan if they don't already use that, they should!
(7 replies) #5 C_Guy on 05 Jan 2007 - 18:12
Reading this article is "unsafe" for intelligent people because it could cause mass frustration.

I, like countless others, have used IE 6 for years with... what's this?... *Zero* incidents. Yes, that's right. Zero. And did I have to do anything special? No.

The only logical way to call IE 6 "unsafe" is to say that it is man-made and therefore, subejct to human error. Ok, so in that case, any and all software is man-made and therefore "unsafe".

Not only that, but IE 7 has been distributed via. Windows Update so every IE user should be on the latest version by now.

You really have to wonder if IE's competitors are paying people to make up stuff to scare off IE users or if it's their own lack of intelligence that spilled out on the Internet.
#5.1 vetmarkjensen on 05 Jan 2007 - 18:35
Stop the press!

C_Guy has never had a problem, so the facts that there were unpatched vulnerabilities and exploit code out there is suddenly irrelevant!

All that every home user needs to do is to upgrade to XP, if they use Win9x, or for corporations to ditch their 2000 workstations, and buy XP.

The world does not run on XP 100% of the time, so IE7 (which is a big improvement, from what I have heard) is not the be-all, end-all solution.

As far as "making stuff up", go ahead and browse through the history of advisories, when exploits were publicly released, and when patches were made available yourself.

As for me, I am inclined to believe that both browsers had problems, and that users were at risk during those times.
#5.2 toadeater on 05 Jan 2007 - 21:39
Quote - (C_Guy said @ #5)
Reading this article is "unsafe" for intelligent people because it could cause mass frustration.

I, like countless others, have used IE 6 for years with... what's this?... *Zero* incidents. Yes, that's right. Zero. And did I have to do anything special? No.


C_Guy, I fix PCs part-time, and 90% of the problems people have are caused by malware they got from IE. So maybe you're the exception, but for the average PC noob Firefox is the easiest solution to their security problems.
#5.3 MaceX on 05 Jan 2007 - 23:17
I too have used IE6 for years and have always kept it up to day. I visit all sorts of sites every single day and have never had an issue with adware. This article is a bunch of FUD.
#5.4 MrCobra on 05 Jan 2007 - 23:19
Quote - (toadeater said @ #5.2)
Quote - (C_Guy said @ #5)
Reading this article is "unsafe" for intelligent people because it could cause mass frustration.

I, like countless others, have used IE 6 for years with... what's this?... *Zero* incidents. Yes, that's right. Zero. And did I have to do anything special? No.


C_Guy, I fix PCs part-time, and 90% of the problems people have are caused by malware they got from IE. So maybe you're the exception, but for the average PC noob Firefox is the easiest solution to their security problems.

Using FF does not automatically make you immune from internet threats. Maybe not as much as IE but certainly it does not stop everything.
#5.5 jkinzer on 05 Jan 2007 - 23:59
Quote - (toadeater said @ #5.2)
Quote - (C_Guy said @ #5)
Reading this article is "unsafe" for intelligent people because it could cause mass frustration.

I, like countless others, have used IE 6 for years with... what's this?... *Zero* incidents. Yes, that's right. Zero. And did I have to do anything special? No.


C_Guy, I fix PCs part-time, and 90% of the problems people have are caused by malware they got from IE. So maybe you're the exception, but for the average PC noob Firefox is the easiest solution to their security problems.


Firefox is definitely a good option. But the more people you tell that to, the more people that use it, the more market share it gets... the more people will try to exploit it.

So, Firefox is a great option because of its relatively low market saturation.
#5.6 Croquant on 06 Jan 2007 - 00:18
Quote - (C_Guy said @ #5)
Reading this article is "unsafe" for intelligent people because it could cause mass frustration.

I, like countless others, have used IE 6 for years with... what's this?... *Zero* incidents. Yes, that's right. Zero. And did I have to do anything special? No.

The only logical way to call IE 6 "unsafe" is to say that it is man-made and therefore, subejct to human error. Ok, so in that case, any and all software is man-made and therefore "unsafe".

Not only that, but IE 7 has been distributed via. Windows Update so every IE user should be on the latest version by now.

You really have to wonder if IE's competitors are paying people to make up stuff to scare off IE users or if it's their own lack of intelligence that spilled out on the Internet.

You're ignoring the fact that if you had been the victim of an unpatched vulnerability in IE, you might not be aware of it. Just because you think your system is uncompromised doesn't necessarily mean it's so. Some exploits might have exposed your personal data to a hacker without you knowing, or have allowed remote code execution that doesn't show up in your firewall or your anti-virus.
#5.7 dagamer34 on 06 Jan 2007 - 03:56
Quote - (MrCobra said @ #5.4)
Quote - (toadeater said @ #5.2)
Quote - (C_Guy said @ #5)
Reading this article is "unsafe" for intelligent people because it could cause mass frustration.

I, like countless others, have used IE 6 for years with... what's this?... *Zero* incidents. Yes, that's right. Zero. And did I have to do anything special? No.


C_Guy, I fix PCs part-time, and 90% of the problems people have are caused by malware they got from IE. So maybe you're the exception, but for the average PC noob Firefox is the easiest solution to their security problems.

Using FF does not automatically make you immune from internet threats. Maybe not as much as IE but certainly it does not stop everything.


True, using Firefox doesn't make a user immune to viruses and spyware, but it's a lot better at protecting people from their own stupidity on the Internet than IE is.
(1 reply) #6 ir0nw0lf on 05 Jan 2007 - 18:12
And how many people were ACTUAL victims of any unsafeness in IE6 over that 284 days? #5 pretty much summed it up. Well said.
#6.1 theh0g on 05 Jan 2007 - 19:28
Yeah, unless you came across a website that abuses the exploit, then it'd all be different and you'd be spitting all over Microsoft now and trying to install Firefox, Opera or even move to OSX/Linux. Grow up, not everybody surf same websites as you and #5 brat. Do you ever leave the house or even country? There are millions and millions people out there, all with different interests and taste, even if 1% of those people come across the exploited code, that means few million victims. Do you really expect everyone that gets his/hers system corrupted will write an article and whine about it? No time, reinstall and move on. But the Microsoft's image gets worse and worse, even if some of you still didn't notice it and don't know jack about economy, but if you read more, you'd know that means the biggest damage to any company. Yes, it's image and public opinion, not shares. You should read more.
(2 replies) #7 dandin1 on 05 Jan 2007 - 18:22
That's a pretty odd way to mesure how unsafe a peice of software is. Counting the days? Seems rather pointless as it doesn't evaluate how big a threat the vulnerabilities were. And since no software is ever flaw-less, couldn't we just say that all programs were unsafe for the entire year? :p
#7.1 Express on 05 Jan 2007 - 20:29
Yeah the metafile bug for example wasn't even directly possible to exploit from IE. You had to resort to user trickery to exploit it.
#7.2 vetmarkjensen on 05 Jan 2007 - 20:50
Quote - (Express said @ #7.1)
Yeah the metafile bug for example wasn't even directly possible to exploit from IE. You had to resort to user trickery to exploit it.
Say what?

The WMF flaw was painfully easy to get into a user's system. In fact, malicious .wmf files were found being served up in ads on myspace.

To infect people on Neowin, all I would have had to do is to have put an infected .wmf in my sig.

"User trickery"? No.
#8 Earl on 05 Jan 2007 - 20:19
I don't care, since I use Linux and Firefox.

#9 ziggie216 on 05 Jan 2007 - 21:06
Is Firefox and Opera really that safer or is it just that exploiters just dont care as much since they dont hold a large market share?
#10 strekship on 05 Jan 2007 - 21:46
I would love firefox if it wasn't so slow and didn't crash as much.
#11 Arcticflare on 05 Jan 2007 - 22:26
Big deal. IE is unsafe 365 days out of every year except leap year, which has extra time. So on leap year, IE is extra unsafe.
(1 reply) #12 waxman830 on 06 Jan 2007 - 00:29
FF is the only way to go. IE lost me a couple of years ago and now I use nothing but FF. Just the fact that with FF I can run adblock and all of the other extensions, and skin it out, makes it much, much better than IE could ever hope to be no matter the version of IE. The fact that it is much safer is just a plus. It's fast stable and just an all around better program; I used to be a big time IE guy until I used FF and saw how much better it really is. I haven't even wasted time with IE7, just MS trying to play catch up, already using the superior product, why switch? If you want a safe, fast, customizable, better, surfing experience use FF; If you want an unsafe, (adware, spyware, malware etc.) slow, ad-laden, non customizable etc. surfing experience then go with IE. Rock On!!!
#12.1 Arcticflare on 06 Jan 2007 - 00:36
I wouldn't be so quick to rally behind Firefox now. Firefox is a pretty good app, yes. We need more alternatives though. Otherwise we'll end up in a similar situation to that of IE. Though IMHO, most of IE's problems come from a what I consider to be a total ****tard's business model in terms of development and deployment. The codebase sucks ass. The fact that it's integrated so deeply into the OS is bad. But if we all rally behind a single app, then it'll become a fat juicy target. More alternatives, I say. And good ones at that.

Again, Firefox is a pretty good app. But let's not make it another monolith.
#13 Raa on 06 Jan 2007 - 00:55
I'm happily running with Maxthon. And so are most of my customers. No issues with me or them when using it - and yes, some of those users are "noobs".


Ahh how fun it can be.
#14 Aero Ultimate on 06 Jan 2007 - 02:22
It's long since known that IE has more holes than a swiss cheese
I really wonder why there are still so much clueless people that keep using it (or frontends built on it)
It seems stupid people never die out.
#15 franzon on 06 Jan 2007 - 10:05
Firefox was unsafe every day in 2006 (for 365 days) because critical holes were found on every Firefox release: http://www.mozilla.org/projects/security/k...rabilities.html

Last edited by franzon on 06 Jan 2007 - 10:10
#16 Mr Spoon on 06 Jan 2007 - 12:03
I don't really care too much.
The fact is, I never got a virus or any data stolen or anything because I used IE 6, so this really doesnt affect me. The fact it could have worries me a little, but not enough to want to change browser.
#17 mujjuman on 07 Jan 2007 - 09:31
LOL nice

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)