RE: [Full-Disclosure] How big is the danger of IE?
From: Daniel H. Renner (dan_at_losangelescomputerhelp.com)
Date: 07/12/04
- Previous message: Chris: "Re: [Full-Disclosure] I small poem in JScript"
- Maybe in reply to: Yaakov Yehudi: "[Full-Disclosure] How big is the danger of IE?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: full-disclosure@lists.netsys.com Date: 11 Jul 2004 15:46:59 -0700
> Message: 3
> Date: Fri, 09 Jul 2004 13:03:22 +1200
> From: Nick FitzGerald <nick@virus-l.demon.co.uk>
> Subject: RE: [Full-Disclosure] How big is the danger of IE?
> To: full-disclosure@lists.netsys.com
> Reply-to: nick@virus-l.demon.co.uk
> Organization: Personal account
>
<snip>
> http://www.kb.cert.org/vuls/id/713878
>
> ...
>
> Use a different web browser
>
</snip>
Admittedly number 6 of 6 solutions, but the fact that CERT suggests it
at all makes it big news in these circles. However, I've see people
debate the use of such an action where IE is built into the operating
system and will conitue to operate regards of another brower being
installed.
I thought I might mention to you that there is an easy handling for
using another browser and disabling IE.
After downloading and installing another browser, open IE, go to Tools,
Options (or Internet Options in the Control Panel) Connections, LAN
Settings. Check the Use a proxy (Auto detect must be unchecked) and set
the addressas "0.0.0.0" and the port as "1".
IE and any program, script, etc. that wants to use it has now been
effectively sent into a black hole, and any sane program that can be
configured to access the Internet on it's own will do fine. This
technique works especially well if you have a LAN proxy for your
Internet access, and can be auto-configured so that the workstations on
the company Intranet use it, but don't use the black hole proxy address
for the internal company website(s).
Note though, that this will also disable Outlook or Outlook Express from
displaying web-based HTML email, but will not stop similar internal
company emails from displaying correctly.
-- Cheers, Dan Renner President Los Angeles Computerhelp http://losangelescomputerhelp.com 818.352.8700 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
- Previous message: Chris: "Re: [Full-Disclosure] I small poem in JScript"
- Maybe in reply to: Yaakov Yehudi: "[Full-Disclosure] How big is the danger of IE?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
