Warning: New IE spyware steals online banking passwords

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.

blazerazor

Golden Member
Aug 28, 2003
1,480
0
0
i use molliza @ home and I use firefox on work machines... they're slower. But I like the SEARCH button that molliza has and I dont have to tab over and put it in a differnet field. I always get that nagging, couldnt open site xyz lmnop 1230. Them having to take my hand OFF my keyboard and use mouse which is SO far of a reach!!!

Other than that, its a pain to install, but just not for the lazy man. .. Oh but I am one. Damn! Simple file stucture tree too hard to comprehend. ;P
 

ArmchairAthlete

Diamond Member
Dec 3, 2002
3,763
0
0
From what I read, Firefox is slower, more bloated, and can't load some pages right. That's enough reason for me to stay away.

I'll keep my PC up to date and not do anything stupid. It's worked well with IE so far!
 

Sid59

Lifer
Sep 2, 2002
11,879
3
81
Originally posted by: ArmchairAthlete
From what I read, Firefox is slower, more bloated, and can't load some pages right. That's enough reason for me to stay away.

I'll keep my PC up to date and not do anything stupid. It's worked well with IE so far!

i also heard that outside the house, people get shot, buses crash and burn, and there is a war.

even more reason to stay inside.
 

CTho9305

Elite Member
Jul 26, 2000
9,214
1
81
Originally posted by: drag
Originally posted by: Slogun
Originally posted by: chrisbtx
Yet another reason NOT to use IE.

Dump it and go for something much better like Mozilla, Firefox, Opera, etc. as stated above.

I'm interested in dumping IE due to the newext exploits.

I did install Firefox, which is supposed to be the "next generation browser" from Mozilla, yet some people seem to be saying Mozilla is best.
Can anyone shed some light?

Firefox and Mozilla both come from the Mozilla project. Firefox is "Next Gen." because it's going to replace Mozilla browser proper.
God I hope not... (at least not for a long while) the Moz interface is a lot better. They'd better make a "look like Moz" theme first. Firebird was great, but it's like the name change required taking a perfectly good setup and making it different.

It's actually a realy good change, Mozilla itself is based on the original old-school Netscape code. And over the time it's been changed, warped, replaced, stomped on etc etc etc. So it works well but with all that history it's hard to get new developers because the time it takes to learn how everything works is daunting.
Actually, they share the VAST majority of the code base. Mozilla was a rewrite of the old-school Netscape code. All the ugliness (layout, rendering, networking) is identical in FireFox. The frontend is different. I've messed around with the code for both frontends, and they're the same to work with - Moz isn't full of ugly hacks or anything like that.

If you can't make up your mind, use firefox if having something quick and fun is important, use Mozilla if stability and mature features is wanted and initial openning speed isn't a issue (what does a extra 2-3 seconds openning time if you leave your browser open for days?)
Moz loads faster, since FF doesn't have quicklaunch.

Originally posted by: ArmchairAthlete
From what I read, Firefox is slower, more bloated, and can't load some pages right. That's enough reason for me to stay away.

I'll keep my PC up to date and not do anything stupid. It's worked well with IE so far!

The wonderful thing about IE is that you don't HAVE to do anything stupid - it goes ahead and gets hacked for you on "normal" sites. I read that one of the sites that ended up hacking IE users was Kelly Blue Book. If you happened to be researching used cars during that, all your passwords would now belong to russian hackers. It's not like IE is safe as long as you stay away from L33tHax0rD00dsW4r3z sites.

Firefox doesn't load any pages incorrectly - it follows stanards.
 

ArmchairAthlete

Diamond Member
Dec 3, 2002
3,763
0
0
The wonderful thing about IE is that you don't HAVE to do anything stupid - it goes ahead and gets hacked for you on "normal" sites.

I'll believe it when I see it happen to me. I've taken IE to plenty of less than reputable sites lately with no problems (even looking for unseen ones with spyware scanners).
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Originally posted by: ArmchairAthlete
The wonderful thing about IE is that you don't HAVE to do anything stupid - it goes ahead and gets hacked for you on "normal" sites.

I'll believe it when I see it happen to me. I've taken IE to plenty of less than reputable sites lately with no problems (even looking for unseen ones with spyware scanners).

Yeah, that's why I walk into streets without looking for traffic. I've heard of people getting hit by cars, but it's only happened to me once. But it was in a parking lot, not a street.
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Originally posted by: ArmchairAthlete
From what I read, Firefox is slower, more bloated, and can't load some pages right. That's enough reason for me to stay away.

I'll keep my PC up to date and not do anything stupid. It's worked well with IE so far!

How big is the IE binary? Oh, it's integrated into the system? So I'd have to install 1+GB of software to get a working install of IE? That's not bloated at all. Yeah, uh huh, sure.

Firefox/Mozilla load pages just fine. Show me a site that does not work properly. We can send it through the whirling validator of doom and see how it fares.
 

ArmchairAthlete

Diamond Member
Dec 3, 2002
3,763
0
0
Originally posted by: n0cmonkey


How big is the IE binary? Oh, it's integrated into the system? So I'd have to install 1+GB of software to get a working install of IE? That's not bloated at all. Yeah, uh huh, sure.

I don't care WHY IE loads faster, just that it does. People don't install Windows just so they can use IE.

Firefox/Mozilla load pages just fine. Show me a site that does not work properly. We can send it through the whirling validator of doom and see how it fares.

I've seen the complaints, maybe I just will go looking myself. I'll give FF a tryout.

EDIT: Toolbars / giant buttons at the top take up double the space as what I have on IE including the Google toolbar =( A bit of tweaking helped shrink that somewhat though.

I've noticed the performance hit and a few things not looking right (no biggies yet tho).

One example (top image):
http://www.24-7media.de/forum/

Another:
https://secure.dslextreme.com/Medusa/Packages/Default.aspx
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Originally posted by: ArmchairAthlete
Originally posted by: n0cmonkey


How big is the IE binary? Oh, it's integrated into the system? So I'd have to install 1+GB of software to get a working install of IE? That's not bloated at all. Yeah, uh huh, sure.

I don't care WHY IE loads faster, just that it does. People don't install Windows just so they can use IE.

But to use IE they have to. Sounds like a lot of freaking bloat to me.

Firefox/Mozilla load pages just fine. Show me a site that does not work properly. We can send it through the whirling validator of doom and see how it fares.

I've seen the complaints, maybe I just will go looking myself. I'll give FF a tryout.

EDIT: Toolbars / giant buttons at the top take up double the space as what I have on IE including the Google toolbar =( A bit of tweaking helped shrink that somewhat though.

I've noticed the performance hit and a few things not looking right (no biggies yet tho).

One example (top image):
http://www.24-7media.de/forum/

Another:
https://secure.dslextreme.com/Medusa/Packages/Default.aspx

I'll check those out when I get home.

EDIT: 24-7media.de's forum is not HTML compliant. Same for dslextreme.com. It's another idiot admin problem. :)
 

drag

Elite Member
Jul 4, 2002
8,708
0
0
It's actually a realy good change, Mozilla itself is based on the original old-school Netscape code. And over the time it's been changed, warped, replaced, stomped on etc etc etc. So it works well but with all that history it's hard to get new developers because the time it takes to learn how everything works is daunting.
Actually, they share the VAST majority of the code base. Mozilla was a rewrite of the old-school Netscape code. All the ugliness (layout, rendering, networking) is identical in FireFox. The frontend is different. I've messed around with the code for both frontends, and they're the same to work with - Moz isn't full of ugly hacks or anything like that.[/quote]

I never messed with either one. Just what I heard in a developer interview, I didn't figure it was full of hacks and stuff, but that it was just complex.

From what I understand is that they specificly designed to have the Gecko rendering engine seperate from the front end. Thats how you get things like Galeon or Epiphany and whatnot.

As far as Mozilla vs Firefox, I think the plan is going to be to replace Mozilla. I wouldn't think it would be very hard to get it to look and feel a lot alike.

[/quote]
If you can't make up your mind, use firefox if having something quick and fun is important, use Mozilla if stability and mature features is wanted and initial openning speed isn't a issue (what does a extra 2-3 seconds openning time if you leave your browser open for days?)
Moz loads faster, since FF doesn't have quicklaunch.
[/quote]

Ok. I was a while since I actually used Mozilla and I did notice on my laptop that Mozilla loads pretty quick nowadays. Personally I don't give a damn on loading times, so I guess I didn't notice. The computer spends 1000000x more time waiting for my brain to "load" as I stare drooling at the screen vs it's loading time. ;)

Originally posted by: ArmchairAthlete
From what I read, Firefox is slower, more bloated, and can't load some pages right. That's enough reason for me to stay away.

I'll keep my PC up to date and not do anything stupid. It's worked well with IE so far!

The wonderful thing about IE is that you don't HAVE to do anything stupid - it goes ahead and gets hacked for you on "normal" sites. I read that one of the sites that ended up hacking IE users was Kelly Blue Book. If you happened to be researching used cars during that, all your passwords would now belong to russian hackers. It's not like IE is safe as long as you stay away from L33tHax0rD00dsW4r3z sites.

Firefox doesn't load any pages incorrectly - it follows stanards.[/quote]

Bloat doesn't enter into it for IE vs Mozilla. With IE you have 90% of the stupid thing running even before you open up the actual browser since a big hunk of the Explorer shell actually goes into the browser.

You already have most of the browser running before you even open up IE for the first time, the way I figure it. And that's part of the problem with Windows/Outlook/IE security-wise. If you get a whole discovered in IE it's nearly impossible to figure out how far the ramifications for the rest of the system goes.

If there is a flaw in Mozilla then 99% of the time only the browser itself suffers. Even if MS programmers are as good as Mozilla programmers (very likely) the chances of a security flaw in IE being serious is much higher then Mozilla because the inherent design of the browser and how it interacts with the rest of the system. Even if they have had the same amount of serious flaws, it's less likely to be a security concern in Mozilla, not thru any magic or superiour programming, but that's just the way it is.

At least that's they way I look at it. I don't know how right I am or not.

What I do know is that good security policies can save you if your using IE, and bad security policies can sink you if your using Firefox. However good security policies + Firefox is better then good security policies and IE. Using Firefox is good security policy in itself.

However not everybody's goal is to be as absolutely secure as possible. It costs convienience and effort. So maybe good enough is good enough for you its worth the trade off so that you can have 3 second faster load time.

However the render time on IE vs Mozilla for webpages, my experiance is that Mozilla is much faster. But I don't have much experiance in comparision because I've never actually done good benchmarks. IE has obviously faster load times, though.

One notable experiance was when my dad was having trouble with a website. One of those "fantasy football" things with lots of java for real time stats and all that. On a 512Meg, 1.8GHZ P4 machine running WinXP the thing was struggling with it. The page was loading slow and the rest of the system was being affected, scrolled slow and was generally acting very awkward. I went downstairs to a Redhat 8.0 system I set up for them. Old 800mhz celeron, 128megs. Mozilla handled that with no problem at all. Didn't even affect the rest of the machine, and all the java worked and all that happiness.

Could be that it's just because Mozilla is native to Linux, maybe it just isn't as optmizied as in Windows as it is on a Linux machine. Don't know.
 

rh71

No Lifer
Aug 28, 2001
52,844
1,049
126
I haven't had any problems with IE in years of use but this stuff gets me thinking...

If Mozilla/Firefox is such a threat to IE (and it certainly is with every passing day and news of IE exploits)... why isn't M$ doing anything about it by coming out with a better browser ? I think the short answer is that there is always going to be an exploit of some kind and these hackers choose MS to probe because they are the most used / popular. It only makes sense.

We all know how buggy Firefox is and the bugfix list is long... if hackers really wanted to... they'd tear it to pieces. Alas, it's < 5% of the population. I guess that's a good reason to use it... not exactly something for the pro-FF masses to be proud of... but whatever.
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Originally posted by: rh71
I haven't had any problems with IE in years of use but this stuff gets me thinking...

If Mozilla/Firefox is such a threat to IE (and it certainly is with every passing day and news of IE exploits)... why isn't M$ doing anything about it by coming out with a better browser ? I think the short answer is that there is always going to be an exploit of some kind and these hackers choose MS to probe because they are the most used / popular. It only makes sense.

We all know how buggy Firefox is and the bugfix list is long... if hackers really wanted to... they'd tear it to pieces. Alas, it's < 5% of the population. I guess that's a good reason to use it... not exactly something for the pro-FF masses to be proud of... but whatever.

Yet that logic is still faulty. IIS is probably the most hacked webserver out there. Apache happens to be the most popular.

Yes, apache runs on several different hardware architectures, but a vulnerability in apache on win32 is a vulnerability on linux x86 is a vulnerability on solaris/SPARC, etc.

Could the malicious hackers have a field day with Mozilla/Firefox? Who knows. Maybe. Maybe not. Not all of the bugs in the bug tracking database are vulnerabilities. ;)
 

drag

Elite Member
Jul 4, 2002
8,708
0
0
We all know how buggy Firefox is and the bugfix list is long... if hackers really wanted to... they'd tear it to pieces. Alas, it's < 5% of the population. I guess that's a good reason to use it... not exactly something for the pro-FF masses to be proud of... but whatever.

Buggy? Bugfix list that is long?

How long is MS's bugfix list? ah... I remember. They don't have one.

Oh, and you know that most bugs are not vunerabilities, but include usability issues, appereances, and feature wishing?

But luckily for us, there are people who do keep lists, because they feel that we need to be able to make informed discisions about what sort of software we can and should depend on.

Such a list is kept at this place

So far for the year 2004 I counted 42 vunerabilities discovered in IE.

Now of course lots of these are duplicates and stuff like that, but nobody can be sure that they aren't a few of them exploiting the same hole or are unique because nobody is allowed to know how IE realy works besides MS.

Now in Firefox I found 2. But that's not quite fair because firefox has been around for only a short amount of time, while IE 6.0 has been around and around and around. So for the entire Mozilla project I have found about 10 for 2004.

You want to see how much fun it is being MS, look at how many of those IE holes are actually fixed vs holes found in Mozilla's stuff.

Here how these threads go:

Firefox Fanboy: "See the IE sky is falling"
IE apologist: "No it's not, you freak"
Ff: "Yes it is, look at this article"
Ia: "Bah. Whatever, I haven't seen any problems."
Ff: "Dude! look! Bob just got squished buy a chunk of the sky!"
Ia: "Whatever, it's his fault for not standing underneath a tree."


I suppose hackers could "tear firefox to peices", but they aren't.
 

ArmchairAthlete

Diamond Member
Dec 3, 2002
3,763
0
0
EDIT: 24-7media.de's forum is not HTML compliant. Same for dslextreme.com. It's another idiot admin problem.

Yes blame the web masters. It becomes my problem when I'm trying to look at a page and for whatever reason it doesn't look right. All I care about is that the page isn't displaying right.

I don't doubt that FF has its vulnereabilities. It's just that nobody (or very few) have been looking for them. That's what protects FF users. It's much more useful to spyware writers/hackers to discover an exploit in IE. They can hit 95% of users instead of 2% or so.
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Originally posted by: ArmchairAthlete
EDIT: 24-7media.de's forum is not HTML compliant. Same for dslextreme.com. It's another idiot admin problem.

Yes blame the web masters. It becomes my problem when I'm trying to look at a page and for whatever reason it doesn't look right. All I care about is that the page isn't displaying right.

It is their fault. And the forums page looked fine in mozilla. The other one was just screwed up and I would never do business with them.

I don't doubt that FF has its vulnereabilities. It's just that nobody (or very few) have been looking for them. That's what protects FF users. It's much more useful to spyware writers/hackers to discover an exploit in IE. They can hit 95% of users instead of 2% or so.

Yeah, that's why there are never vulnerabilities discovered in FreeBSD.
 

straubs

Senior member
Jan 31, 2001
908
0
0
Wow, some of you guys are awfully stubborn.

When was IE6 released? 4 YEARS ago was it? I know change is hard, but get with the times!

Oh, and there's the problem with auto-installing spyware and hijackers. This latest one being completely stealth and on mainstream sites. That's always a bonus!

But just add some more duck tape to that mess and continue until you get hit yourself... La la la!

What you hard-core IE users need to do is subscribe to the premier MS bug tracking mailing list and see what's out there being exploited at any give time. It's not a MS-hater club, but security experts that are interested in helping MS or their use of MS products.

NTBugTraq

With that said, when I switched it had nothing to do with security, it had everything to do with features and options. You can customize the %*&amp;$ out of the mozilla-based browsers. You want to selectively block flash or ad servers with a click, you got it! You want to increase or decrease any pages text size by any amount you wish? You got it! None of this lame "smallest, small, medium, etc" crap here. Built in pop up blocking, built in search, built in tabs. cookie whitelists, cookie blacklists. Woot!

It is truly painful and time-wasting for me to use IE anymore, and it doesn't even have anything to do with security.