The U.S. Department of Homeland security is advising Americans not to use the Internet Explorer Web browser until a fix is found for a serious security flaw that came to light over the weekend. VPC
Must be true if it's in USA Today or on the local radio.
Or you could actually read word for word what the government actually said. It's probably shorter than the "news" report. I posted the link earlier but it's so short I'll post the actual text here in its entirety.
US-CERT is aware of active exploitation of a use-after-free vulnerability in Microsoft Internet Explorer. This vulnerability affects IE versions 6 through 11 and could allow unauthorized remote code execution.
US-CERT recommends that users and administrators review Microsoft Security Advisory
2963983 for mitigation actions and workarounds. Those who cannot follow Microsoft's recommendations, such as Windows XP users, may consider employing an alternate browser.
For more details, please see
VU#222929.
In the worst possible case, if all the posted solutions don't work, the government advised people "
may consider employing an alternate browser". I realize English is a second language to Americans but there actually is a difference between that and...
Don't use IE: Government issues major warning over Internet Explorer bug and says hackers are ALREADY exploiting it
or that the government is telling people to not use IE.
BTW, the same government department issued the same type of alert for Firefox the very next day saying there were new fixes to Firefox vulnerabilities. So if you haven't installed those you're just as at risk as IE users. And guess what...next month there will be more fixes to Firefox, Chrome, IE, and many other things to fix vulnerabilities they all have today.
And on the very same day issued the same type of alert for Adobe Flash which you may not even know you're using...but I bet you are.
So I guess, using Chicken Little logic, everyone should consider employing an alternate browser, like no browser.
I love when all these news stories say things like "it came to light over the weekend" meaning the reporter read the story probably right here in this thread. Too funny. It's not news, it's story telling. It's giving back to you the same info you're telling the "news source". It's what news is today, telling you what you want to hear.
But if people want to believe the sky is falling then enjoy. I think that's a hoot.
Side note just for fun...A long time ago I and a couple of partners started a company called "WalkSoftly" where I wrote an app that detected evil software that would install into your system and watch key strokes. That way the evil software could steal passwords. Scary? You betcha.
Was there any software actually doing that evil stuff? Nope. Why not? It sure isn't hard to do. I could write such an app in a couple of hours and insert it into a bunch of free apps people download from less than perfect sites, or email it to a few thousand people who some would open it and by this afternoon I probably could have lots of passwords and the places to use them. So why aren't hackers doing that? Because the problem isn't in the taking it's in the using. How much money could I actually steal vs risk of going to jail forever or having a drone visit me? It isn't worth it.
The real money is in selling the fix. I created a demo that stole a password from an investor (with their advanced understanding and agreement) and boom instant funding (well, not exactly instant). But that's the sell. WalkSoftly later merged with another company and was sold to Network Solutions for I think $119 million (of which I got less than $10K but that's another story).
There are 3 arms to software security.
1. Evil people doing evil things.
2. Good people making software safer.
3. People making money scaring people which is not only perfectly legal but a cornerstone of our economy.
The days of scary software getting onto your computer are largely over. Not because software is safer but mainly because hackers have much more interesting things to do. There is probably software already on your computer that you didn't authorize doing things you probably wouldn't like if you knew about it. But to survive it has to keep its head down. If it does anything to actually harm you in any meaningful way it will be discovered very fast and destroyed. This has really been true for a long time. Back in the day most harmful software did damage by mistake, it was dumb. Today these kinds of software are written by professionals who understand how to do it so you never ever notice.
The company that found this IE scare...there are lots of companies that look for holes. They get no money (in most cases) for finding the hole. They do it to get press in order to get business for doing other security related things. To get press they go to a lot of effort to convince some crap news web site to write a story. Then they send that story to other crap news sources and so on until hopefully the story goes viral. Most of the time these stories don't get to the mass media level and are just in the security circles, but sometimes they do.