IE7 to tighten priviledges

Paul K · 07-06-2005, 16:31

Eweek

Quote:

ORLANDO, Fla.ÃƒÆ’Ã†â€™Ãƒâ€šÃ‚Â¢ÃƒÆ’Ã‚Â¢ÃƒÂ¢Ã¢â€šÂ¬Ã…Â¡Ãƒâ€š Ã‚Â¬ÃƒÆ’Ã‚Â¢ÃƒÂ¢Ã¢â‚¬Å¡Ã‚Â¬Ãƒâ€šÃ‚ÂA senior Microsoft executive on Monday confirmed that the upcoming Internet Explorer 7.0 browser upgrade will ship with reduced privilege mode turned on by default to help thwart browser-based hacking attacks.
During a strategic briefing on security at the TechEd conference, corporate VP of Microsoft Corp.'s Security Business & Technology Unit Gordon Mangione said IE 7.0 will be chock full of security and privacy enhancements, all aimed at addressing the biggest threats facing Web surfers today.
"We've re-architected it to defend against exploits," Mangione said, describing IE 7.0 as a "lower rights IE" with base minimal privileges.
The new browser will also feature major changes in the way files are executed and new anti-spoofing and anti-phishing technology to let users identify fake scam Web sites.

**Chris** · 07-06-2005, 16:47

're-architected' ..?

they need to stop inventing words and spend more time on the software.

Stuart · 07-06-2005, 17:10

Pretty sure re-architected is a valid form of american business "slang"

cookie_365 · 07-06-2005, 19:45

Quote:

Originally Posted by scastle

Pretty sure re-architected is a valid form of american business "slang"

Can I suggest 'Rectoelocuted'?

Theodoric · 07-06-2005, 20:00

Quote:

Originally Posted by Chris T

're-architected' ..?

they need to stop inventing words and spend more time on the software.

True. What's wrong with the old-fashioned "redesigned"?

07-06-2005, 20:05

Quote:

Originally Posted by Theodoric

True. What's wrong with the old-fashioned "redesigned"?

redesigned would tend to suggest that the application has been revised where as rearchitected would tend to suggest that the infrastructure components have been redesign

banjo · 07-06-2005, 20:09

I like eva, external vehicular activity, or more recently, a Mars Sol ? why couldn't they say "a day"

Graham · 07-06-2005, 20:16

Quote:

Originally Posted by cookie_365

Quote:

Originally Posted by scastle

Pretty sure re-architected is a valid form of american business "slang"

Can I suggest 'Rectoelocuted'?

I think that should be "retro-electrocuted"

cookie_365 · 07-06-2005, 20:31

Quote:

Originally Posted by Graham

I think that should be "retro-electrocuted"

Only if they had a badly wired microphone hanging out of ......

Are we getting a tad OT ?

greencreeper · 07-06-2005, 22:13

I can see trouble ahead. It'll be a rehash of the XP SP2 firewall. All was well until you upgraded, then everything stopped working. Our policy at work is to turn it off - damned nuisance and not needed. Thinking about it, potential nightmare really given that the trend is towards using the Web as a front-end rather than writing a GUI. All those applications

AndrewJ · 07-06-2005, 22:40

Forgive me if this is someone on google but I am not feeling well today, is there a ETA for IE7's release?

Just so I know when to back everything up on my pc.

Richard M · 07-06-2005, 23:57

IE should have run with reduced privileges from the start, idiots.
IIS (their web server software) runs in an extremely constricted user-context and has done since the year 1999 so why assume that home users running IE 5,5.5 and 6 are any less vulnerable?
Well they did assume, and that's why they have the worst browser security record in history.

Chrysalis · 08-06-2005, 01:15

Good to know MS are learning unfortenatly it took them many years to figure it out.

greencreeper · 08-06-2005, 01:23

Quote:

Originally Posted by Chrysalis

Good to know MS are learning unfortenatly it took them many years to figure it out.

Nah - they've just given us time to forget that they created most of the bugs and exploits in the first place. Now they're giving us a solution and we should be grateful. All Hail Microsoft

ÃƒÆ’Ã†â€™ÃƒÂ¢Ã¢â€šÂ¬Ã…Â¡ÃƒÆ’Ã¢â‚¬Å¡Ãƒâ€šÃ‚Â£5 says that the first IE 7 security vulnerability will be found within a week

Lord Nikon · 08-06-2005, 01:38

They aren't bugs, merely undocumented 'features'

MS have always had a propensity for releasing vulnerable / unstable software, and given their home user / business terminal market position, and the lack of viable competition (Yes, I know about linux, but for a lot of people using legacy apps, and for people wishing to play games it's still not a viable alternative for most) the only way they can get people to upgrade at a premium each new release, is by promising less vulnerability and better stability each time, if their OS actually DID do what it said on the box, where would be the incentive for people to spend money on the next version when it gets released?