Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register
ENTERPRISE WINDOWS  

You know you've got a browser problem when …

CERT and even Slate say that users should switch to another browser until IE is secure

By Oliver Rist
July 09, 2004
 

The U.S. Department of Homeland Security, otherwise known as Dancing with Big Brother, tells the world to stop using the Web browser you fought long and hard to tie into your operating system. That’s what happened to beleaguered Microsoft when the department's Computer Emergency Readiness Team (CERT) recently recommended users switch to alternate browser platforms to avoid the security holes in IE caused largely by ActiveX.

Free IT resource

Virtualization Insights from Top Experts - Learn how virtualization gets real!

Sponsored by Dell

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

And Microsoft isn’t objecting. Microsoft's own Slate even posted an article advocating Firefox, a Mozilla offshoot, in favor of IE until Microsoft gets its security act together.

Naturally, those alternate browser platforms have leaped on this opportunity with enthusiasm. Apple, Mozilla, and Opera jointly announced their development of an extension to their plug-in API that will handle ActiveX scripts differently -- and apparently more securely -- than IE does. All this work is being done in conjunction with Adobe, Macromedia, and Sun Microsystems, specifically to allow support for the companies' plug-in versions of PDF, Flash, and Java. 

I stopped using IE almost a year ago after downloading Mozilla and finding that it really works. But taking a cue from Slate, I downloaded Firefox, and frankly, I’m hooked. First, there’s no support for ActiveX, which is fine by me. It even blocks executable downloads by default -- which can be a pain until you figure out how to change it. If you really need ActiveX, you can always run IE just for that specific site visit.

What got me about Firefox is that it’s obviously the result of folks who haven’t given up on improving the Web browsing experience. Microsoft hasn’t made any major functional changes to IE in several years -- aside from opening additional security holes. Firefox doesn’t contain any miracle features either, but that tabbed browsing feature shows it is at least still thinking. Tabbed browsing is like Web browsing through an Excel workbook. You can load several sites in several tabs and then flip through much more easily than if they were all separate windows.

Frankly, though, Mozilla beating Microsoft at browser functionality is to be expected. After all, since its inception, Mozilla has been thinking of nothing else, whereas Microsoft dusted itself off after the 1990s browser wars and victoriously marched off to different frontiers. The question isn’t, Which is the best browser? It is, Does it make sense to go through the trouble of a browser swap on a corporate level?

The answer: Hell, yes. If you’ve got even just a semi-decent software distribution mechanism as part of your Windows desktop management tool kit, then installing Firefox is well-worth the effort. User training is either minimal or nil depending on your users’ PC literacy level. The security benefit is huge. The only downside is ActiveX.

In my networks, the only site that requires ActiveX is Windows Update. Because we instituted a centralized patch management schema, however, users don’t have the Windows Update service installed any longer, so I’m not worried. But that’s me. Plenty of businesses require access to any number of sites that may be running ActiveX plug-ins exclusively.

If that’s you, then educating users to load IE only when visiting those sites may or may not be an option. Configuring desktop shortcuts to those sites, using IE, and steering users to the Firefox or other browser icon for general Web browsing is one method, although hardly guaranteed. Discussing the situation with the companies behind those sites is certainly an idea, and it never hurts to look for alternatives. The point is that the browser is back on IT radar.

Microsoft has too many problems in IE to fix them with just another patch. To regain my trust, the company must release an entirely new platform, and that’s not happening anytime soon. In the meantime, Firefox is a godsend, and those folks looking to do Web business solely on ActiveX better revamp their business plans.





 


 
Oliver Rist is a senior contributing editor at InfoWorld.

  More of Oliver Rist's column
  Oliver Rist's Weblog

Newsletter Check out all of our free newsletters!
Enter e-mail address:




 

TOP NEWS:


»  Think small with Linutop 2 PC
The tiny, energy-efficient Linux-based Linutop 2 is a low-cost, minimalist PC that is eerily quiet to use

»  Sun technologist: SOAP stack a 'failure'
Tim Bray, co-inventor of XML, prefers REST mechanism over SOAP

»  Software piracy hurts the open-source community too
Many nations are beginning to see stolen proprietary software as a lost opportunity for open source software, whose development can encourage innovation and job growth

»  Intel readies slew of embedded chips based on Atom core
Intel is trying to increase performance and drop power consumption in more than 15 system-on-chips that use the Atom core

»  Microsoft surprise reorganization aimed at online woes
Microsoft's online troubles hint at larger vulnerability; the company is facing challenges in areas that have been a lock for many years

»  Attack code released for DNS bug
Security experts warn that this attack code may give cybercriminals a way to launch virtually undetectable phishing attacks




5 Things You Need to Know About Storage Virtualization
This Webcast feature insights from various InfoWorld articles, as well as primary research conducted by InfoWorld and sister company IDC to better understand demand drivers, challenges and opportunities provided by storage virtualization, as well as other flavors or approaches to virtualization Sponsor: HP

»  Click here to view this Webcast
  Zombie PCs Are Attacking Your LAN
A recent study showed that malware-infected zombie PCs are now a bigger threat to ISPs and Web infrastructure than DoS attacks. As this brand new IT Strategy Guide explains, an increased use of peer-to-peer techniques by the attackers has made it harder to fight back. Download now, compliments of Verio:

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 

FIND PRODUCTS AND COMPANIES
» COMPLETE PRODUCT GUIDE



TECHNOLOGY INDEX
• Applications
• Application Development
• Security
• Networking
• Wireless
• Platforms
• Hardware
• Data Management
• Storage
• Web Services
• Business
• Telecom
• Professional Services
• Standards

TECH WATCH 


What's the 411 on GOOG-411?
Just as Google has become synonymous with "performing a Web search," 411 is understood to mean "information" -- as in "what's the 411?" I was thus surprised to discover, from a billboard, no less, that the king of search is taking on the ...

Apple HTML source reveals 'iPhone Extreme'
"This one's a stretch..." reports AppleInsider. Um, yeah. Reporting on HTML code sightings of product names could be called a stretch, but iPhone Extreme has a ring to it. Now, that sounds like the product Apple should have released first, rather ...

COLUMNISTS

Unified under law
Ephraim Schwartz's Column and Blog (InfoWorld) - In the litigious world we live in, deploying a unified communications platform in your enterprise could...
» MORE COLUMNISTS

MORE INFOWORLD BLOGS


Open Sources 
Product Management
When I joined MySQL four years ago, there was quite a lot of debate about product management. We didn't actually have ...

Zero Day 
Botnet herders tending smaller flocks
New research backs up the theory that botnet operators are keeping their networks smaller in a continued effort to keep ...



• Advice Line
• Database Underground
• The Deep End
• Enterprise Mac
• Geeks in Paradise
• Grid Meter
• The Gripe Line
• InfoWorld Daily
• Inside IT
• IT Troubleshooter
• ITXtreme
• Open Sources
• ProdBlog
• Real World SOA
• Reality Check
• Security Adviser
• SMB IT
• The Storage Network
• Tech Watch
• Virtualization Report
• Zero Day

ADVERTISEMENT


RESOURCE CENTERadvertisement 

GOVERNMENT IT & POLICY
'If you don't go after the network, you're never going to stop these guys. Never.'
From the State Department, All the News for Inquiring Minds
TechPresident, the Internet Citizenry's New Consensus Taker



Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist