If you're visiting family over the holiday, turn off Internet Explorer.

http://www.f-secure.com/weblog/archives/00002080.html

by FSecurePal • 16 years ago

204 58 16 years ago

NathanKP• 16 years ago

Better yet, why not install Google Chrome and replace their Internet Explorer link with a link to Google Chrome? Just make the link have IE's icon so that they don't wonder where the internet has gone.

They will marvel about how you "made their internet faster." I like to make it even easier for people by making two different links: one called "Internet" which takes them to Google, the other called "Email" which takes them to their web email. The results are instant simplification, security improvement, and general betterment of the web by migrating more people to the Webkit rendering engine.

sandipc• 16 years ago

in my experience, they will marvel at the speed for a little while... until a favorite website doesn't display correctly for whatever reason. Then it becomes my job to play tech support.

Encosia• 16 years ago

Other than Windows Update (which non-technical users shouldn't be running manually anyway), I can't even remember the last site I've been do that didn't work perfectly on Chrome (or Firefox). Examples?

On the other hand, we're getting to the point where some newer sites render poorly in IE, run very slowly, are missing features, or don't work at all. HTML5 and intensive JavaScript may be on the verge of reversing the old conventional wisdom about using IE for widest compatibility.

JonnieCache• 16 years ago

My tip is to simply install an IE-simulating theme for firefox: https://addons.mozilla.org/en-US/firefox/addon/4129/

Then install the following extension to change the titlebars: https://addons.mozilla.org/en-US/firefox/addon/57/?id=57

Finally a bit of desktop shortcut renaming and icon-customisation, and mother will never be any the wiser!

Xuzz• 16 years ago

It's kinda sad... but I've actually done exactly that before.

lgeek2• 16 years ago

Actually my parents are using a Debian box with Chromium. I found it is a lot easier to manage remotely than a Windows box; it's really low maintenance; they won't grab malware and the Gnome desktop can be really dumbed down - I only left the window switcher, shortcuts for chromium and skype on the panel and on the desktop, time and date, volume control.

vinhboy2• 16 years ago

If you ever do a write up or have screenshots of this setup, I would love to see it.

code_duck2• 16 years ago

Mine too. Same reasoning. She accepted Ubuntu 100%, which makes sense given it's not much of a different interface than Windows XP for the average user. She even missed it when it was gone for a week (I took her system home to do a fresh install, upgrading 8.04 to 10.04). Forced to use my father's netbook, she said she 'missed the Mozilla fox operating system'. I suppose that does show how much people are tuned into the browser as the main feature of the OS!

TomasSedovic2• 16 years ago

Have you somehow got Flash working correctly or don't they use it?

I've never seen a Linux system running Flash as "smoothly" as Windows do. That's on Arch, Fedora and Ubuntu on fairly modern computers with decent specs. 32bit seems to be better than 64bit but it's still slow and buggy.

aceofspades19• 16 years ago

I've never seen flash run smooth on any os

lgeek2• 16 years ago

I've switched Youtube to HTML5 video and that solved their problems. :) Indeed, Flash is a lot slower on non-Windows platforms but if you have to use it, it's usable.

jakevoytko• 16 years ago

Follow the OP's advice: don't remove IE unless it is unused! You may lose a convert by removing it without explanation.

My parents navigate the Internet by clicking the arrow next to the address bar, and clicking the webpage they want to use. The last time I tried converting them, they also used work-related webpages with ActiveX controls, which no sane browser would ever support. Tech is slow outside of the tech industry.

My parents' Chrome usage would be a play in three Acts:

Act 1: Confusion. "Where did my Sites go? The ones that were on top. I used to click something to click the sites, but now that's gone. There's no arrow! I have to open History? I didn't have to do that before. Where did my Homepage go? What's a 'tab'?"

Act 2: Judgement. "I had this the way I like it before. I don't think I can get used to using this. And I couldn't use the Work system, so I have to keep switching between things."

Act 3: Trashbin. "That Google thing? I uninstalled that. We didn't like it. And we couldn't use it for Work."

As they say, the best user interface is the one you already know how to use.

Maskawanian• 16 years ago

Use IETab for those specific websites, seamless support.

seabee• 16 years ago

Not seamless in my experience. There is one site in particular that I need to use whenever my domains need renewing; the javascript menus didn't work in the IE tab, but was just fine viewed from IE itself. Not a clue why.

msluyter• 16 years ago

sigh

I hopefully installed Chrome and set it as the default browser on my mom's new Windows 7 machine. Things seemed fine for a while, until I got an e-mail from her saying that whenever she clicked a link from her e-mail (Outlook, unfortunately), she'd get Chrome's "Aw, Snap!" error message -- which, incidentally, she found obnoxious.

Sure enough, it turns out that this is a common issue that occurs when a link in Outlook is followed and Chrome isn't currently running. (Things work fine if it's already up.) Whether this is a Chrome issue or an Outlook issue is unclear to me, but the bottom line is similar to above.

topbanana• 16 years ago

Is IE8 really so bad?

trotsky3• 16 years ago

With two current IE 0-days, one with an exploit package on metasploit it's going to be very widely abused until microsoft pushes a fix.

richbradshaw• 16 years ago

I'm assuming this is a tongue in cheek comment.

rm-rf5• 16 years ago

The more interesting question: Is IE8 significantly worse than the alternatives?

I think not.

All major browsers on all common operating systems have exploitable vulnerabilities often enough that switching browsers will not solve the problem.

fjarlq3• 16 years ago

But all major browsers are not targeted with the same vigor. IE is targeted much more vigorously because the criminals stand to gain much more from their efforts than if they target, say, Opera.

Also, Chrome's sandboxing is designed to assume the browser will have exploitable vulnerabilities, so there are two hoops that the exploit must jump through instead of just one. In this latest IE vulnerability there is only the one hoop and then on most machines the exploit has acquired administrator privileges.

fjarlq3• 16 years ago

Another reason why IE is more vigorously targeted: it is patched the least. Some systems deliberately run downrev versions of IE for various reasons (they are pirated and thus afraid of Windows Update, or they are based on a frozen IT build of Windows which only gets updated quarterly, or whatever).

So, even if Microsoft releases a patch for this latest IE vulnerability today, millions of PCs will remain unpatched for months. Valuable targets -- members of the next botnet.

By comparison, Chrome is much more aggressive about updating itself. For example, consider Chrome 6.0's short lifespan:

http://www.netmarketshare.com/browser-market-share.aspx?qpri...

trotsky3• 16 years ago

Current 0-day or no, you'll be doing much more good in the long run if you replace the pre-installed acrobat reader with a 3rd party viewer.

w1ntermute3• 16 years ago

It's not even preinstalled, so it shouldn't be that difficult. Foxit and Sumatra PDF are both great choices.

trotsky3• 16 years ago

It's quite easy either way... but if we're talking about systems that are vulnerable to this ie flaw the chances of it having shipped with acrobat pre-installed are like 99%.

wwortiz3• 16 years ago

If they are a regular computer purchaser (i.e. buy from a manufacturer like hp, dell, etc.) it most certainly is preinstalled along with and old version of java and an old version of flash for their convenience.

barake• 16 years ago

This is really good advice - Adobe's reader is a performance destroyer. Foxit is getting bogged down with features but Sumatra [1] is simple and super fast.

[1] http://blog.kowalczyk.info/software/sumatrapdf/free-pdf-read...

Anechoic• 16 years ago

Just like IE, sometimes you have to use Adode Reader. I deliberately removed Acrobat from my mom's iMac and set Preview.app as the default. Worked fine for years until I got a call a few days ago about a PDF she needed to open to do some work. Sure enough, it was some sort of interactive PDF that only seemed to work with the Adobe Reader.

cookiecaper2• 16 years ago

I've had this before too. I haven't tested for a few versions, but I know that evince was unable to open USPS shipping labels, and I had to go install Acrobat Reader for Linux on my parents' computers. :(

eli• 16 years ago

Even just disabling Javascript in Adobe Reader goes a long way to avoiding many exploits. It's pretty rarely used in legitimate PDFs

vinhboy2• 16 years ago

Saw this bug on a security researcher's tweet couple of weeks ago: http://seclists.org/fulldisclosure/2010/Dec/110

Today found a great write up about how to exploit it here: http://www.breakingpointsystems.com/community/blog/ie-vulner...

I have no idea what any of it means. If anyone has any good links that teaches newbie concepts to these things, please do share. Thanks.

stevefink2• 16 years ago

As a developer who's deeply tied into web technologies, I cannot help but grin at this post. Unfortunately, I know where this is going to lead, however. My mother visits a site that embeds WMV-based videos for her Russian TV shows. It was not until she purchased a new MacBook that I realized that this was the site she visits 90% of the time she's on the Internet. I thought installing Flip4Mac would solve her crisis, and it partially did, video and audio came in through Firefox as expected. With that said, seeking within the video does not work as naturally well as it does in IE. In fact, it doesn't work at all. The end result was I purchased my mother VMWare Fusion 3, a copy of Windows XP, and ended up having to tutor her on the usage of a virtual machine, the mechanics between how to seamlessly work with the two operating systems, etc. I still get daily tech support calls that eat up a lot of my personal time, now not only for the MacBook, but for VMWare Fusion, Windows XP and IE/Safari usage.

The web developer in me loathes IE for obvious reasons which will not be reiterated here for the billionth time. The son in me kind of wishes my mother just had a simple netbook running windows xp, IE, and nothing else.

eru2• 16 years ago

You can install Windows XP on a Macbook.

stevefink2• 16 years ago

I know it sounds crazy, but I've found teaching my mother to use VMWare had an easier learning curve than BootCamp.

rm-rf5• 16 years ago

And install all it's vulnerabilities on your Mac?

masklinn• 16 years ago

> The end result was I purchased my mother VMWare Fusion 3, a copy of Windows XP, and ended up having to tutor her on the usage of a virtual machine, the mechanics between how to seamlessly work with the two operating systems, etc. I still get daily tech support calls that eat up a lot of my personal time, now not only for the MacBook, but for VMWare Fusion, Windows XP and IE/Safari usage.

Just enabling Unity for MSIE doesn't work well enough?

gte910h• 16 years ago

I suggest bootcamp/winxp native install, and just abandon the mac half of it.

code_duck2• 16 years ago

Flip4Mac isn't my idea of good Mac software. I have it installed on my Mac but basically, it um, isn't good.

I don't have any problem viewing WMVs and doing whatever with them on Linux. Is VNC or mplayer available for Mac OS?

maeon3• 16 years ago

1. Remove all shortcuts to Internet explorer from the start menu, mydocuments, desktop, and search menus.

2. Install latest version of firefox, use IE themes.

3. Make a shortcut to start firefox, but change the icon to internet explorer, the retarded blue 'e' symbol.

4. Make sure you get all the bookmarks copied over.

5. Make sure any buttons, keys or special behavior moved to equal features on firefox.

6. Also put some firefox shortcut icons around the start menu and desktop.

They won't even notice anything is different, and if they do, tell them they had to radically update it so that it would be more secure and faster.

If they were tech savvy enough to notice what you were doing, they would have the skill to change it back, and most likely would be already using firefox.

rm-rf5• 16 years ago

And then Firefox will announce a zero-day. What will you have gained?

fjarlq3• 16 years ago

You'll have gained more time to obtain a fix, because Firefox vulnerabilities are not attacked as swiftly and as broadly as IE vulnerabilities.

endlessvoid94• 16 years ago

I convinced them to switch to a new iMac.

Mission accomplished.

mmaunder• 16 years ago

That frozen-industrial-wasteland photo of Helsinki is awesome.

bgmccollum• 16 years ago

Uh...Chrome Frame?

If you're visiting family over the holiday, turn off Internet Explorer.

Related Stories