Barney's Blog

Blog archive

IE an Intranet Attack Vector?

IE has always had the rap of being an insecure browser, something that I believe will change as more IE folks move to the more robust IE 8. (Side note: Over 50 Redmond Report readers helped me craft a May cover story about IE 8 which says, in short, that test versions of the browser were a mess but the final product is stable and sweet -- and more secure.)

Regardless of the extra measures, IE 8 and earlier versions have one big flaw, at least according to one security firm: There are four core security settings and the one for internal networks, intranets, is too lax. This could allow scumbag loser hacker creeps to creep into your network and have their way. The saving grace? The hackers need some detail on how your intranet interface looks.

I wouldn't mind more of us using honeypots to lure these hackers in, solid forensics to find out who they are, and law enforcement to nab 'em. Even better, how about a few Navy Seals? Should more be done to identify hackers and would you implement technology that helps? Calm, rational and off-your-rocker commentary welcome at dbarney@redmondmag.com.

Posted by Doug Barney on 04/15/2009 at 1:16 PM


Featured

  • Microsoft Offers More Help on Windows Server 2008 Upgrades

    Microsoft this week published additional help resources for organizations stuck on Windows Server 2008, which fell out of support on Jan. 14.

  • Microsoft Ups Its Carbon Reduction Goals

    Microsoft on Thursday announced a corporatewide carbon reduction effort that aims to make the company "carbon negative" by 2030.

  • How To Dynamically Lock Down an Unattended Windows 10 PC

    One of the biggest security risks in any organization happens when a user walks away from their PC without logging out. Microsoft has the solution (and it's not a password-protected screensaver).

  • First Stable Chromium-Based Microsoft Edge Browser Released

    Microsoft on Wednesday announced the first release of its Chromium-based Microsoft Edge browser at the "stable" commercial-release stage.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.