Re: New Paper: More than 600 million users surf at high risk

[Rob Thompson <my.security.lists () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeff Martin wrote:
> My theory - there are gazillion corporate and business apps that don't run on IE7 thus users do not update even their 
> personal PCs (for VPN access to those apps.). I work for a hospital and we have apps that only recently with IE6. 
> When we ask about plans for IE8 support, we get the blank stare. Who doesn't love ActiveX?

Yeah, that was what I tried to get at earlier.

So now, what does that say about us?  Who's the sucker...

We are PAYING for that type of crappy service.

> -------------------------------------------------
>
> This message is provided "AS IS" without warranty of any kind, either expressed or implied, including, but not 
> limited to, the implied warranties of accuracy, correct grammar and spelling, lack of vulgarity or adult themes, 
> correct references, absence of viruses and/or viral memes, originality, or fitness for any particular purpose.
>
> -------------------------------------------------
>
>
> --- On Tue, 7/1/08, Nick FitzGerald <nick () virus-l demon co uk> wrote:
>
> > From: Nick FitzGerald <nick () virus-l demon co uk>
> > Subject: RE: New Paper: More than 600 million users surf at high risk
> > To: bugtraq () securityfocus com
> > Date: Tuesday, July 1, 2008, 8:27 PM
> > Paul Schmehl to Larry Seltzer:
> >
> > > My completely non-scientific,
> > unsupported-by-empirical-evidence answer is 
> > > no.  It's because people who use Firefox tend to
> > be more aware of security 
> > > threats and the need to keep software up to date.  It
> > could also be (at 
> > > least in part) because Firefox has a built-in,
> > enabled-by-default, update 
> > > available warning system.
> > I would agree with both those reasons and add that FF
> > updates are not 
> > hampered by the disabling of the inbuilt (and often
> > seriously mistrusted) 
> > OS auto-update mechanisms.
> >
> > I also _suspect_ that a lot of pirated copies of Windows
> > probably have 
> > system updates disabled.
> >
> >
> > Regards,
> >
> > Nick FitzGerald


- --
Rob

+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+
|                         _   |
|  ASCII ribbon campaign ( )  |
|   - against HTML email  X   |
|                        / \  |
|                             |
+-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Ignorance is bliss...

iEYEARECAAYFAkh5BCYACgkQcfN68iZZIccO2gCguiXZhH2xzYIge2QJeEmKkAT8
VNEAniAxzm7UMRW2xWGCP/iFtfaz5fDM
=UlWl
-----END PGP SIGNATURE-----