Barney's Blog

Blog archive

IE an Intranet Attack Vector?

IE has always had the rap of being an insecure browser, something that I believe will change as more IE folks move to the more robust IE 8. (Side note: Over 50 Redmond Report readers helped me craft a May cover story about IE 8 which says, in short, that test versions of the browser were a mess but the final product is stable and sweet -- and more secure.)

Regardless of the extra measures, IE 8 and earlier versions have one big flaw, at least according to one security firm: There are four core security settings and the one for internal networks, intranets, is too lax. This could allow scumbag loser hacker creeps to creep into your network and have their way. The saving grace? The hackers need some detail on how your intranet interface looks.

I wouldn't mind more of us using honeypots to lure these hackers in, solid forensics to find out who they are, and law enforcement to nab 'em. Even better, how about a few Navy Seals? Should more be done to identify hackers and would you implement technology that helps? Calm, rational and off-your-rocker commentary welcome at [email protected].

Posted by Doug Barney on April 15, 2009


Featured

  • Salesforce To Acquire Informatica in $8 Billion Deal

    Salesforce announced on Tuesday it plans to acquire data management firm Informatica for $8 billion.

  • An image of planes flying around a globe

    2025 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

  • Microsoft Gives Orgs More Power to 'Tune' AI Agents

    At its Build 2025 conference this week, Microsoft unveiled significant advancements aimed at empowering enterprises to create more sophisticated AI agents.

  • Build 2025: Microsoft Charts Wider Path for AI Agents

    At Build 2025, Microsoft unveiled its strategic vision for the future of AI agents, emphasizing the development of autonomous systems capable of performing complex tasks across various applications.