Barney's Blog

Blog archive

IE 8 as Security Update

Microsoft delivered IE 8 to IT shops using Windows Server Update Services yesterday. Of course, you didn't ask for it. It just arrived, like a security update.

Some IT shops may still be using IE 6, but Microsoft doesn't really encourage it. IE 6 isn't standards-based like IE 8, nor does it provide the same level of security. For those still using IE 7, Microsoft tried to ease the transition by adding a Compatibility View function in the browser that switches from IE 8 to IE 7 rendering.

Security certainly seems like a compelling reason for any organization to select a browser, and Microsoft cited two NSS Labs studies that demonstrated IE 8 to be a top performer in thwarting malware and phishing attacks. What Microsoft failed to mention, however, is that it paid for those two studies. What's worse, the studies themselves don't indicate Microsoft's sponsorship.

Is Microsoft's IE 8 the most secure browser? Maybe. Unfortunately, Microsoft may have blown some credibility by not ensuring that its sponsorship was properly declared in the NSS Labs studies. In the research and publishing world, this is a major no-no.

Will your IT shop switch to IE 8 in the near future? Is security a compelling reason to make the switch, or are you more worried about breaking apps? Tell Doug at [email protected].

Posted by Kurt Mackie on August 26, 2009


Featured

  • Microsoft Dismantles RedVDS Cybercrime Marketplace Linked to $40M in Phishing Fraud

    In a coordinated action spanning the United States and the United Kingdom, Microsoft’s Digital Crimes Unit (DCU) and international law enforcement collaborators have taken down RedVDS, a subscription based cybercrime platform tied to an estimated $40 million in fraud losses in the U.S. since March 2025.

  • Sound Wave Illustration

    CrowdStrike's Acquisition of SGNL Aims to Strengthen Identity Security

    CrowdStrike signs definitive agreement to purchase SGNL, an identity security specialist, in a deal valued at about $740 million.

  • Microsoft Acquires Osmos, Automating Data Engineering inside Fabric

    In a strategic move to reduce time-consuming manual data preparation, Microsoft has acquired Seattle-based startup Osmos, specializing in agentic AI for data engineering.

  • Linux Foundation Unites Major Tech Firms to Launch Agentic AI Foundation

    The Linux Foundation today announced the creation of a new collaborative initiative — the Agentic AI Foundation (AAIF) — bringing together major AI and cloud players such as Microsoft, OpenAI, Anthropic and other major tech companies.