Barney's Blog

Blog archive

IE an Intranet Attack Vector?

IE has always had the rap of being an insecure browser, something that I believe will change as more IE folks move to the more robust IE 8. (Side note: Over 50 Redmond Report readers helped me craft a May cover story about IE 8 which says, in short, that test versions of the browser were a mess but the final product is stable and sweet -- and more secure.)

Regardless of the extra measures, IE 8 and earlier versions have one big flaw, at least according to one security firm: There are four core security settings and the one for internal networks, intranets, is too lax. This could allow scumbag loser hacker creeps to creep into your network and have their way. The saving grace? The hackers need some detail on how your intranet interface looks.

I wouldn't mind more of us using honeypots to lure these hackers in, solid forensics to find out who they are, and law enforcement to nab 'em. Even better, how about a few Navy Seals? Should more be done to identify hackers and would you implement technology that helps? Calm, rational and off-your-rocker commentary welcome at [email protected]

Posted by Doug Barney on 04/15/2009 at 1:16 PM


Featured

  • Microsoft and SAP Enhance Partnership with Teams Integration

    Microsoft and SAP this week described continuing partnership efforts on Microsoft Azure, while also planning a Microsoft Teams integration with SAP's enterprise resource planning product and other solutions.

  • Blue Squares Graphic

    Microsoft Previews Azure IoT Edge for Linux on Windows

    Microsoft announced a preview of Azure IoT Edge for Linux on Windows, which lets organizations tap Linux virtual machine processes that also work with Windows- and Azure-based processes and services.

  • How To Automate Tasks in Azure SQL Database

    Knowing how to automate tasks in the cloud will make you a more productive DBA. Here are the key concepts to understand about cloud scripting and a rundown of the best tools for automating code in Azure.

  • Microsoft Open License To End Next Year for Government and Education Groups

    Microsoft's "Open License program" will end on Jan. 1, 2022, and not just for commercial customers, but also for government, education and nonprofit organizations.

comments powered by Disqus