main
Report a problem

637 million browser users at risk

Horrocks   on 01 July 2008 - 22:00 · 20 comments & 9696 views

Advertisement (Why?)
A group of researches on Tuesday said 637 million Web users are surfing with outdated Internet browsers and therefore at greater risk of Web-based attacks.

Using data collected from Google Web searches and security firm Secunia, the researchers, Stefan Frei (of ETH, Zurich), Thomas Dübendorfer (Google), Gunter Ollmann (IBM ISS), and Martin May (ETH, Zurich), analyzed the browsers used in a new report. They did so in an effort to understand why so many recent attacks by criminal hackers have been aimed at the browser, and why those attacks have been so successful.

Overall the authors found that roughly 40 percent of users were using insecure versions of Web browsers. Among the least compliant were users of Internet Explorer, which currently dominates the Internet browser market.

The data was collected in mid-June 2008. The users were scattered among 78 percent Internet Explorer users, 16 percent Firefox, 3 percent Safari, and 0.8 percent for Opera. Of these, 52 percent were running the latest version of Internet Explorer, 92 percent for Firefox, 70 percent for Apple, and 90 percent for Opera.

With such data, there is much to debate and discuss. What are your thoughts Neowin?

View: News.com

Post a comment · Send to friend Comments · There are 20 additional comments
#1 JonathanMarston on 01 Jul 2008 - 22:28
I'm not sure how they could tell what security patches people had installed, but I can tell you one reason why many people aren't using the latest version of IE: backward compatibility (or the lack thereof) in newer browsers. My company still primarily runs IE6 because of a few legacy web-apps that don't work with IE7/FF. I think you'd find that this is a common situation.
(1 reply) #2 n_K on 01 Jul 2008 - 23:07
I'm running firefox 1.5, awesome browser!
And ******* alert: "Gunter Ollmann (IBM ISS)" yeh well in my mind since IBM took over ISS its gone right down, my firewall support (for imho the best firewall on Earth that I use for my server and PC) will end and no more updates will released, under a month left or so ?
#2.1 Airlink on 02 Jul 2008 - 02:00
You do realize that Firefox 3.0 is out now, right?
#3 Angel Blue01 on 01 Jul 2008 - 23:26
What a surprise
(5 replies) #4 darkpuma on 02 Jul 2008 - 00:18
Our entire university still uses IE6. seriously. Get with the program carleton X-P
on that note, a lot of companies are not upgrading to IE7 either.... hmmm....
#4.1 Airlink on 02 Jul 2008 - 02:03
That's because people hate the way IE7's UI changed. If they could opt for the IE6 look & feel everything would be fine, but Microsoft insisted on jamming their ****tarded UI down everybody's throats.
#4.2 InsaneNutter on 02 Jul 2008 - 06:45
(Airlink said @ #4.1)
That's because people hate the way IE7's UI changed. If they could opt for the IE6 look & feel everything would be fine, but Microsoft insisted on jamming their ****tarded UI down everybody's throats.


Our Uni still has IE6 too, It’s because some “legacy web apps” don’t work in IE7 or Firefox. Don’t ask me what they are, it’s just what we get told at Uni.

The UI of IE7 is a great improvement over IE6 in my opinion.
#4.3 cork1958 on 02 Jul 2008 - 12:45
(Airlink said @ #4.1)
That's because people hate the way IE7's UI changed. If they could opt for the IE6 look & feel everything would be fine, but Microsoft insisted on jamming their ****tarded UI down everybody's throats.


Exactly why I still use IE6, when using Windows, that is.
Also hate the fact IE7 is to brain dead to remember usernames at sites in between restarts.
#4.4 Deviate_X on 02 Jul 2008 - 15:22
(InsaneNutter said @ #4.2)
(Airlink said @ #4.1)
That's because people hate the way IE7's UI changed. If they could opt for the IE6 look & feel everything would be fine, but Microsoft insisted on jamming their ****tarded UI down everybody's throats.


Our Uni still has IE6 too, It’s because some “legacy web apps” don’t work in IE7 or Firefox. Don’t ask me what they are, it’s just what we get told at Uni.

The UI of IE7 is a great improvement over IE6 in my opinion.


This caused by laziness and bad management, microsoft gave these company admins and collage admins the opportunity to opt-out of updates, and swicth off updating computers across whole networks with one tick of a checkbox. Once they opt-out, it stays that way until something very bad happens.

#4.5 darkpuma on 02 Jul 2008 - 18:20
(Deviate_X said @ #4.4)
(InsaneNutter said @ #4.2)
(Airlink said @ #4.1)
That's because people hate the way IE7's UI changed. If they could opt for the IE6 look & feel everything would be fine, but Microsoft insisted on jamming their ****tarded UI down everybody's throats.


Our Uni still has IE6 too, It’s because some “legacy web apps” don’t work in IE7 or Firefox. Don’t ask me what they are, it’s just what we get told at Uni.

The UI of IE7 is a great improvement over IE6 in my opinion.


This caused by laziness and bad management, microsoft gave these company admins and collage admins the opportunity to opt-out of updates, and swicth off updating computers across whole networks with one tick of a checkbox. Once they opt-out, it stays that way until something very bad happens.

what i figured
(1 reply) #5 GEIST on 02 Jul 2008 - 01:34
Warning: Any and all Internet users at risk at any time in any part of the world with any browser on any operating system.
#5.1 joeydoo on 02 Jul 2008 - 05:25
ARGGHHHH! {Runs around in a circle screaming with eyes closed}

!GADUNG! {Hit's wall, falls on ass}
(2 replies) #6 RedFlow on 02 Jul 2008 - 04:04
The reason theres so many out-dated versions of Internet Explorer is because the non-tech savvy people (like us here) do not know how to update their browsers or don't feel the need to. Also, Microsoft doesn't give easy-updates unlike FireFox and Opera. FireFox (what I use) has a pop-up that basically says "Your version is out of date. Click here to upgrade" and downloads the files and updates them with no hassle at all. This is the different.
#6.1 vetGerry on 02 Jul 2008 - 04:10
That is true IE dosn't have a version checker, but all IE updates is push through Windows Update so there no need to add that feature in IE.
#6.2 SakuraKira on 02 Jul 2008 - 04:18
(RedFlow said @ #6)
The reason theres so many out-dated versions of Internet Explorer is because the non-tech savvy people (like us here) do not know how to update their browsers or don't feel the need to. Also, Microsoft doesn't give easy-updates unlike FireFox and Opera. FireFox (what I use) has a pop-up that basically says "Your version is out of date. Click here to upgrade" and downloads the files and updates them with no hassle at all. This is the different.


When I originally got my IE 7 it was provided through Microsoft Update (formerly Windows Update). As is the case for the following three IE 7 downloads I had to get after reformatting on separate occasions. It's been a long time now since IE 7 was released, and the only way people wouldn't have it through Updates is if they purposely chose to not acquire it, and then hid it from view.

Of course they could also not have Updates turned on, and there are variety of reasons for that.

IMO, Microsoft makes it very easy for people to get updates. How much use of the tool that MS provided people actually make use of is their own decision... especially since everything is enabled by default.
(1 reply) #7 Tiger.Girl on 02 Jul 2008 - 05:47
Simple, other browsers should be more like Firefox and Opera. Browsers shouldn't rely on operating system updates and should be independently auto updated by the browser itself. Semi off topic but the browsers should also be updated regardless of authenticity of the operating system license.
#7.1 XerXis on 02 Jul 2008 - 09:04
A lot of people like a one place updater like microsoft update on windows or apt-get on debian/ubuntu. It makes life easier and in my mind beats having a separate updater for each program
#8 vetDave on 02 Jul 2008 - 12:33
Al Gore is gonna be ****ed, he never intended the internet for botnets.

Seriously though, is anybody surprised that most end users don't bother with updates? Anybody who's worked a day of support knows that it's like pulling teeth to get people to update even if it will fix the immediate problem them have, let alone some abstract risk they don't understand.
#9 hotdog963al on 02 Jul 2008 - 12:55
Firefox 1.5 user reporting in.
#10 mamee on 02 Jul 2008 - 21:08
You are not declared cool by using Firefox 1.5.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)