Barney's Blog

Blog archive

IE an Intranet Attack Vector?

IE has always had the rap of being an insecure browser, something that I believe will change as more IE folks move to the more robust IE 8. (Side note: Over 50 Redmond Report readers helped me craft a May cover story about IE 8 which says, in short, that test versions of the browser were a mess but the final product is stable and sweet -- and more secure.)

Regardless of the extra measures, IE 8 and earlier versions have one big flaw, at least according to one security firm: There are four core security settings and the one for internal networks, intranets, is too lax. This could allow scumbag loser hacker creeps to creep into your network and have their way. The saving grace? The hackers need some detail on how your intranet interface looks.

I wouldn't mind more of us using honeypots to lure these hackers in, solid forensics to find out who they are, and law enforcement to nab 'em. Even better, how about a few Navy Seals? Should more be done to identify hackers and would you implement technology that helps? Calm, rational and off-your-rocker commentary welcome at [email protected]

Posted by Doug Barney on April 15, 2009 at 11:53 AM


Featured

  • Microsoft Announces Milestones for 'Perpetual' Office Products

    Office 2021 for Windows, commonly thought of as the retail "boxed" product, will reach general availability on Oct. 5, the same day as Windows 11.

  • The Case for Windows 11 Will Be Made with Security and Telemetry

    Steering a Windows 11 move will be rough without measuring the gains or losses along the way, so says Cambridge, Mass.-based Microsoft partner Aternity.

  • The 2021 Microsoft Product Roadmap

    From Windows 10X to the next generation of Microsoft's application server products, here are the product milestones coming down the pipeline in 2021.

  • New Microsoft 365 Monitoring Platform Helps MSPs Avoid the 'Logo Blame Game'

    Martello Technologies has announced a new platform to help partners manage their customers' Microsoft 365 and Microsoft Teams deployments.