OfficeMedic.com

Archive for September, 2006

Just Say No!

Saturday, September 16th, 2006

Today yet another attack has been found against Microsoft Internet Explorer that turns unprotected computers into unwilling slaves of the attacker, hijacking them to become members of massive bot networks. No action is required on the user’s part is required, other than surfing to a malicious website.

The exploit is amplified because it’s a zero-day exploit—taking advantage of a flaw in Internet Explorer within a day of the flaw being discovered. The flaw is present in fully-patched computers running Windows XP SP2 and IE 6.0 and, as of yet, Microsoft has not issued a security update. (The next scheduled update is on October 10.) So what can you do?

Rather than suggest that you use another browser, this time I’ll point out that behavior is the first defense when it comes to computer and internet security. Reports are that this current flaw is being taken advantage of by various porn sites. Other vectors for similar exploits include illegally-downloaded music and software and attachments in e-mail messages.

In each instance, the user is involved in risky behavior that exposes their computer to the exploit. Putting aside the morality of viewing pornography and stealing music, the fact is that these behaviors heighten the risk that you will be exposed to virus and spyware infestation. Consequences of that behavior include the loss of data, identity theft, and more. Can you afford the cost of your behavior? (And parents should immediately talk to their children about this issue.)

Just say “no!”