Where is the notificiation about IE zero day vulnerablity?

Discussion in 'Security Software' started by Imhotep, Nov 27, 2005.

  1. Imhotep

    Imhotep Guest

    Has anyone noticed that there has been NO NEWS coverage about this? I guess
    those MS advertising dollars are working against the simple act of
    notifying their customers about this critical condition....


    Imhotep
     
    Imhotep, Nov 27, 2005
    #1
    1. Advertisements

  2. Microsoft did notify customers, and the press has been covering it.

    Reporting serious Microsoft vulnerabilities are big money for the press.
    This one just isn't as big a story as you think it is. MS advertising
    dollars has zero to do with it.

    http://www.microsoft.com/technet/security/advisory/911302.mspx
    http://www.google.com/search?q=911302+microsoft

    Notifying customers more than has already been done doesn't really add too
    much value here, given that most customers would take any action to mitigate
    this until a patch is released.
     
    karl levinson, mvp, Nov 27, 2005
    #2
    1. Advertisements

  3. Imhotep

    Imhotep Guest

    Still do not see it on the non-techie sources (CNN, Yahoo, etc). I do
    remember back when Firefox had the IDN issue it was all over the news web
    sites (and that one have a day zero work around). However, I still find it
    interesting that the popular news sources are not carring the article...
    Add to value here??? Sure it does. Customers could temporally use firefox or
    opera and surf safe....I think that adds a lot of value here. Again, if
    news sources carried the article....which is why they probably are not.
    Again, MS has a lot of advertising dollars to spend somewhere....

    Imhotep
     
    Imhotep, Nov 27, 2005
    #3
  4. Imhotep

    Robert Moir Guest

    As do IBM, Sun, and Apple - who would all benefit from this news getting
    high play in the public media. I don't think advertising budgets have
    anything to do with it.

    Stop thinking like a "computer person" and think like a news editor trying
    to put together interesting stories for people who use computers and don't
    simply care about them.

    From that angle, there isn't a story because there isn't an obvious big
    disaster or something scary sounding but simple and easy to explain without
    using big words that they can hang a hook on.

    Vague stories about poorly made containers are not a story. Make those
    containers gas tanks and put one in every Ford Pinto on the road and ruin a
    few lives and *now* you've got a story - even though the details haven't
    changed one jot.

    At the moment we've got "a vague story about a poorly made container", so to
    speak. It won't be a story until something catches light.

    The RPC buffer overflow wasn't much of a story; the blaster worm that
    exploited it - headlines all over the place.


    --
     
    Robert Moir, Nov 27, 2005
    #4
  5. Imhotep

    Imhotep Guest

    First Apple does not care since you can run any browser on Apple (include
    the crappy IE). Secondly, IBM and Sun don't have the advertising dollar,
    compared to MS...
    Hummm then explain to me why Firefox's IDN made all the popular news sites
    when 1) there already has a zero day work around 2) This, IE security hole,
    there is no work around and the security hole ALLOWS people to execute any
    binary on your PC 3) The code already was published for the Critical IE
    security flaw and any monkey could modify it? Humm sounds like a better
    story then the Firefox IDN issue does it not?

    Sorry my friend but your argument is feeble at best.
    Again, why did Firefox's IDN (with zero day work around) make all of the
    popular news sites (CNN, Yahoo, BBC)???? So it is news when it is Firefox
    but not IE???? Is that really what you are saying??? And you are agreeing
    with this???
    Microsoft confirmed it. There is no fix. Just visiting a web site can
    compromise your Microsoft PC...it is a story (even more than Firefox's IDN
    issue)...but not getting any popular news attention....
    Again, why then, by your own arguments, did Firefox's IDN issue make all the
    popular news sites (within a day or so). There were no exploits and there
    was a day zero work around too!

    Face it. There are concerns at Microsoft about Firefox's going popularity.
    Face it, Firefox has an advantage of better security. Face it, most people
    switch to firefox because of better security.....and face it, Microsoft is
    using it's "power and influence" to bury the story, as long as possible, to
    prevent even more people from ditching IE for Firefox (or opera, etc) It
    would not be the first time they have done this and it certainly will not
    be the last....

    Now you can chose to ignore that it if you want, but come on. We have spoken
    before and you are an educated individual, why are you denying the
    obvious?????????????????

    Summary: The only reason this is not in the popular news sites is because MS
    can not afford to lose more marketshare to Firefox EVEN AT THE EXPENSE OF
    IT'S CLIENTS!!!!!!!!

    This is exactly why I have nothing but disgust for that company...

    Imhotep
     
    Imhotep, Nov 27, 2005
    #5
  6. What is with the conspiracy theorist play? Just google for "ie zero day"
    and you will get many links (eweek, infoweek, etc)
    MS release below advisory less then 24 hours after getting first report of
    it, so I don't think they are hiding anything.
    http://www.microsoft.com/technet/security/advisory/906267.mspx
     
    William Stacey [MVP], Nov 27, 2005
    #6
  7. Imhotep

    Imhotep Guest


    I believe, maybe you did not read all of our discussions, that I was
    referencing what a typical home user would view (CNN, Yahoo, etc) not
    specialized news agencies. After all, it is the typical Windows home user
    that gets burned more than anyone else....


    Imhotep
     
    Imhotep, Nov 27, 2005
    #7
  8. More "home" users use google then Yahoo, so that does not hold water.
    Regardless, similar search results show in yahoo.com as with goole. As for
    CNN, you should ask them. Why try to pin that on MS? CNN was the biggest
    MS basher during the big legal battle, so I don't think CNN would hold
    anything back because of MS. Are you trying to invent news here?
     
    William Stacey [MVP], Nov 27, 2005
    #8
  9. Imhotep

    Robert Moir Guest

    Imhotep wrote:
    [lots of snipping]
    And I feel that your disgust is causing you to see a conspiracy where non
    exists.

    Sometimes a shadow on a grassy knoll is just a shadow, nothing more. If you
    read the UFO websites then you'll find the people who believe in UFOs don't
    claim every odd radar reading is caused by aliens. See where I'm going with
    this?

    One of us has to be wrong, I guess. I'm comfortable with the fact that it
    could be me who is mistaken. Are you comfortable with the fact that it could
    also be you?
     
    Robert Moir, Nov 27, 2005
    #9
  10. Imhotep

    Imhotep Guest

    For news since when? All of the "home" users I know use CNN, MSNBC and
    Yahoo...I am afraid your statement does not hold water.
    Honestly, I am not sure if any of the US news sources were "MS Bashers"...

    Again, the question purposed was why did Firefox get all of the attention
    from the "home user" web sites when:

    1) There already was a day zero fix/work around
    2) The IE security hole is much more severe since the code has already been
    published...
    3) Let's face it corporations may have received an email but it is the
    Microsoft home users that get crewed more often than not....


    ....ah I get it, maybe this is an attempt to "bell curve" the "Get the Facts"
    facts with respect to Firefox vs IE...

    Imhotep
     
    Imhotep, Nov 27, 2005
    #10
  11. Imhotep

    Imhotep Guest

    Spare me...

    Why did you avoid answering the statements I made before the very last
    comment. Here let me help you out:
    First Apple does not care since you can run any browser on Apple (include
    the crappy IE). Secondly, IBM and Sun don't have the advertising dollar,
    compared to MS...
    Hummm then explain to me why Firefox's IDN made all the popular news sites
    when 1) there already has a zero day work around 2) This, IE security hole,
    there is no work around and the security hole ALLOWS people to execute any
    binary on your PC 3) The code already was published for the Critical IE
    security flaw and any monkey could modify it? Humm sounds like a better
    story then the Firefox IDN issue does it not?

    Sorry my friend but your argument is feeble at best.
    Again, why did Firefox's IDN (with zero day work around) make all of the
    popular news sites (CNN, Yahoo, BBC)???? So it is news when it is Firefox
    but not IE???? Is that really what you are saying??? And you are agreeing
    with this???
    Microsoft confirmed it. There is no fix. Just visiting a web site can
    compromise your Microsoft PC...it is a story (even more than Firefox's IDN
    issue)...but not getting any popular news attention....
    Again, why then, by your own arguments, did Firefox's IDN issue make all the
    popular news sites (within a day or so). There were no exploits and there
    was a day zero work around too!

    Face it. There are concerns at Microsoft about Firefox's going popularity.
    Face it, Firefox has an advantage of better security. Face it, most people
    switch to firefox because of better security.....and face it, Microsoft is
    using it's "power and influence" to bury the story, as long as possible, to
    prevent even more people from ditching IE for Firefox (or opera, etc) It
    would not be the first time they have done this and it certainly will not
    be the last....

    Now you can chose to ignore that it if you want, but come on. We have spoken
    before and you are an educated individual, why are you denying the
    obvious?????????????????

    Summary: The only reason this is not in the popular news sites is because MS
    can not afford to lose more marketshare to Firefox EVEN AT THE EXPENSE OF
    IT'S CLIENTS!!!!!!!!

    This is exactly why I have nothing but disgust for that company...

    Imhotep
     
    Imhotep, Nov 27, 2005
    #11
  12. Again, the question purposed was why did Firefox get all of the attention
    Honestly, who knows and who cares. I mean ask your news sources why they
    run the stories they do. Again, you can find it on yahoo. The others must
    have better stories to run.
     
    William Stacey [MVP], Nov 27, 2005
    #12
  13. Imhotep

    Robert Moir Guest

    Because I read those and like you, said "Spare me...", and didn't feel the
    need to reply to them. I don't have anything invested in Microsoft or the
    American news media so I'm not terribly interested or excited in them.

    You presented your theory that the lack of mainstream news coverage is down
    to a conspiracy. I presented my theory that it isn't in the news because it
    isn't news. I don't see anything else on that line worth debating at the
    moment.
     
    Robert Moir, Nov 27, 2005
    #13
  14. "Chicken Little" and "Mind of Mencia" kept coming to mind when I read the
    OP. =)
     
    Shenan Stanley, Nov 27, 2005
    #14
  15. Imhotep

    Imhotep Guest

    hummm...MVP..ah..

    Who cares? How about all the home users that will get screwed, yet
    again...Personally, I care....

    Imhotep
     
    Imhotep, Nov 27, 2005
    #15
  16. Imhotep

    Imhotep Guest

    You were using the old two step about conspiracies. I bet you really do
    think that Iraq has WMD hidden in a sandy bunker....

    You did not answer the question I submitted. I will reiterate:

    Your position was it is not news. Then, why did Firefox get all the
    "attention" while it had the IDN security flaw? That is the question. The
    answer is that Firefox is open Source and does not have a company backing
    it with marketing dollars...

    Imhotep
     
    Imhotep, Nov 27, 2005
    #16
  17. Imhotep

    Imhotep Guest


    Humm...when I read your comments I keep thinking of all those mindless
    idiots that actually believed there was WMA in Iraq...funny eh?

    But that was not planned or a conspiracy...really it was not....really.

    Imhotep
     
    Imhotep, Nov 27, 2005
    #17
  18. It's good that you care. I have no problem with you caring.. But i will
    answer this way again..

    I just don't think having CNN, Yahoo, BBC report on another vulnerability in
    IE would push more people to FireFox.

    Most people wouldn't understand what it all meant or would zone out/skim
    over it because it is of no interest to them - that is their tech-supports
    problem - not theirs - even if they have their own computer(s) at home they
    manage.

    Those who switch to FireFox do so because of encouragement from people they
    know/trust/asked advice from. At most - they might ask someone they
    know/trust and usually ask advice from about the article/broadcast they just
    read/heard/saw - and then - the person they ask may not either be informed
    of the issue yet or could be neutral/in a weird mood/just not care/have a
    different attitude about it all and give them advice like "Use the Off By
    One Web Browser".. ( http://www.offbyone.com/ ) and walk away.

    Do I tell people to try FireFox?
    Yep.

    Do I do it because of vulerabilities found in IE?
    Nope.

    Now - should this whole thing be some big news story?
    I don't know - I don't make those decisions. I know that if I were a head
    honcho with one of the larger news reporting agencies - I probably would
    have the attitude protrayed in so many movies about the news media - what
    story will cause the most sensational outcry? What story will make the most
    people stand up and argue and thus watch/read my news as opposed to the
    1000's of other choices they have? Yeah - Internet Explorer vulnerability
    just doesn't make the top of the list because too many of the
    listeners/watchers/readers won't care.

    Sad?
    Maybe.

    True?
    Probably.

    Have you paid attention to the news lately?
    All of it?

    There's probably a reason.
     
    Shenan Stanley, Nov 27, 2005
    #18
  19. Or, they could disable Javascript. Most people won't do any of these. But
    if they want to do so, they've been warned, by MS and others.

    The media has a field day with reporting just about any MS vulnerability.
    There is no shortage of articles on serious MS vulnerabilities. Usually the
    articles pop up by the hundreds after people start becoming infected via the
    vulnerability, which AFAIK is not happening yet with this.

    By the way, this vulnerability affects not just IE but Firefox and Opera as
    well. At the moment it is only a denial of service on the other two, but
    that's how it started on IE as well. I haven't seen a whole lot of media
    articles on the Firefox vulnerability, or people asking where's the patch,
    but it's probably because of all those Firefox advertising dollars.

    http://xforce.iss.net/xforce/xfdb/20783
     
    karl levinson, mvp, Nov 27, 2005
    #19
  20. Hey - whatever makes it through your foil hat is not my problem. =)
    Should have bought "Heavy Duty".. It says it right on the box.

    You are comparing Internet Explorer/OS vulnerabilities to Weapons of Mass
    Destruction and human suffering.
    Neat.

    Did you know they put mind-controlling Flouride in your drinking water?
     
    Shenan Stanley, Nov 27, 2005
    #20
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.