Did CERT *really* say to not use Internet Explorer?
Category IBM/Lotus
A day or two ago, I ran across a story from a "less than first tier" news source that said CERT's advisory about the latest Microsoft virus included a recommendation to not use Internet Explorer. Figuring that was pretty bad news when a government "anti-terrorism" agency frowns on your software, I went over to CERT to see the warning. All I can find is recommendations to turn off JavaScript, update your antivirus software, run firewalls, blah, blah, blah...
Now there are a number of stories about the CERT advisory, most of which have quotes similar to the following:
CERT recommends that Explorer users consider other browsers that are not affected by the attack, such as Mozilla, Mozilla Firefox, Netscape and Opera. Mac, Linux and other non-Windows operating systems are immune from this attack. For people who continue to use the Internet Explorer, CERT and Microsoft recommend setting the browser's security settings to "high," but that can impair some browsing functions.
I *still* can not find a reference to this on the CERT site... Can anyone help me out? Did I just not see the particular warning, or is this just lazy journalism with people not checking their facts before writing the story?
A day or two ago, I ran across a story from a "less than first tier" news source that said CERT's advisory about the latest Microsoft virus included a recommendation to not use Internet Explorer. Figuring that was pretty bad news when a government "anti-terrorism" agency frowns on your software, I went over to CERT to see the warning. All I can find is recommendations to turn off JavaScript, update your antivirus software, run firewalls, blah, blah, blah...
Now there are a number of stories about the CERT advisory, most of which have quotes similar to the following:
CERT recommends that Explorer users consider other browsers that are not affected by the attack, such as Mozilla, Mozilla Firefox, Netscape and Opera. Mac, Linux and other non-Windows operating systems are immune from this attack. For people who continue to use the Internet Explorer, CERT and Microsoft recommend setting the browser's security settings to "high," but that can impair some browsing functions.
I *still* can not find a reference to this on the CERT site... Can anyone help me out? Did I just not see the particular warning, or is this just lazy journalism with people not checking their facts before writing the story?



Comments
http://www.kb.cert.org/vuls/id/713878/
The last item in the Solutions section "suggests" using a different browser, but also reminds the reader that IE will still be installed and available to hackers.
Posted by Ted At 15:57:27 On 02/07/2004 | - Website - |