SillyDog701

[Antony]

I heard the news this morning from Sunrise.

Wired reported that there are six serious flaws discovered in Windows Vista, a month before Vista officially available to consumers.

Flaws Are Detected in Microsoft’s Vista (The New York Times)

The browser flaw is particularly troubling because it potentially means that Web users could become infected with malicious software simply by visiting a booby-trapped site. That would make it possible for an attacker to inject rogue software into the Vista-based computer, according to executives at Determina, a company based in Redwood City, Calif., that sells software intended to protect against operating system and other vulnerabilities.

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en) AppleWebKit/418.9.1 (KHTML, like Gecko) Safari/419.3

[orizng]

sounds like IE7 isn't as secure as M$ bragged, better keep firefox going..

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.1) Gecko/20061223 Firefox/2.0.0.1

[Mandrake]

sounds like IE7 isn't as secure as M$ bragged, better keep firefox going..

That's a pretty ignorant statement. I'm no fan of IE, but there have been plenty of flaws in Firefox too.

We'll just have to wait and see if Vista is going to be more secure than previous terms of Windows in the long term. But, realistically, when over 90% of computer users are going to use Windows there's bound to be a lot of flaws crop up.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a2pre) Gecko/20061226 Minefield/3.0a2pre

[Don_HH2K]

I was reading a good article up at Ars Technica about how this flaw isn't as bad as it's made out to be. Most security advisories rate it rather low on a severity scale.

From what I've been reading, you need to be authenticated on the target machine in order for this vulnerability to work, so you'd need to exploit another hole other than this one before getting it to work anyway.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.0 x64; en-US; rv:1.8.1) Gecko/20061030 BonEcho/2.0 (mmoy CE K8N-X02)