Internet Explorer info leak festers for 2 years
Microsoft's 600-day bug bite
For almost two years, Microsoft's Internet Explorer browser has been vulnerable to attacks that steal digital security tokens and other sensitive data, a security researcher said recently.
Researcher Chris Evans said he alerted Microsoft to the information disclosure vulnerability in IE in December 2008. As of October 21, it remained unfixed, making his disclosure a “600-day” vulnerability, he quipped.
“There are a varied number of text structures which can be stolen (iteratively if necessary) with this trick,” Evans warned.
Firefox was once vulnerable to similar attacks but maintainers of the open-source browser fixed the flaw in December 2008. That was the same month Microsoft was informed of the vulnerability, but it has been allowed to remain.
A Microsoft spokeswoman on Monday issued the following statement, which she attributed to Jerry Bryant, a spokesman for Microsoft response:
"Microsoft is aware of the public posting of a low severity information disclosure issue in Internet Explorer. A successful attack requires a victim website to be configured in a specific way which is non-standard for most sites. We are not aware of any attacks seeking to exploit this issue and will update customers if that changes." ®
Yours truly, from Microsoft
This sounds like Microsoft-Speak for WDGAS (we don't give a s**t)...
As always with " them "
"They" do know how to make us all warm and fuzzy inside and reassured that our data is safe with them and that the boys have only our best interrests in mind and that they really are looking out for us. Yes .. right ,if it wasn't important .. why did mozilla fix it ? giggles ?
Moving right along folks ... Usual bs. time for a pint ..
I assume you mean "by and large". It's an old nautical term implying that a ship could sail into the wind ("by the wind") as well as when the wind was behind the ship (or "large").
It's a pretty common mistake, so as long as you don't say anything about intensive purposes I'll let you off.