By way of here's a CSS vulnerability in IE. What pisses me off is the lame excuse this "so-called security firm" E-cqurity lists as the reason they didn't bother to contact Microsoft to let them know about the issue.
"This would most likely be small problem to Microsoft and we decided not to report it. Internet Explorer still has quite a few serious unpatched security holes in it, and we don't think this one deserves Microsoft's attention. In the meantime, perhaps
using a different browser to surf the web is in order."
The last statement says it all. These people clearly have an agenda. So rather than report a potential security flaw to Microsoft before releasing the information to the public (where malicious people can exploit the vulnerability) they see fit to recommend an alternate browser. The responsible thing to do would have been to take 5 minutes to report the freaking bug and let Microsoft decide whether it was important enough to fix. What a bunch of assholes.
Posted by Christian at July 27, 2004 02:02 PM |