Is The IE JavaScript Flaw a Threat to AJAX or a Catalyst to FireFox? | November 23rd, 2005
A serious JavaScript related flaw in IE called “JS.Scob.Trojan“ was reported today. Security experts are saying: “you basically have two choices: Disable JavaScript in Internet Explorer or install another browser.” Well is users disable JavaScript in IE, still the leading web browser, that will disable any AJAX based website they go to. On the other hand if users care enough about AJAX style interfaces they can install Mozilla’s FireFox and keep on surfing!
Will websites and enterprises shy away from AJAX (I hope not) or will users adopt alternate, non MS, web browsers?
(Might depend how quickly MS releases a patch).
Technorati Tags : microsoft, firefox, mozilla, ajax, browser, security
November 23rd, 2005 at 7:33 pm
All the links points to articles from Jun 2004? How as this reported today?
November 23rd, 2005 at 8:08 pm
Good point Xian. It was actually was just raised in status to extremely critical or code red or some such thing. http://www.informationweek.com/story/showArticle.jhtml?articleID=174400739
I just linked to the old articles because they seemed to have better descriptions of the problem.
December 2nd, 2005 at 1:07 pm
I think your comment is on the mark. Poor security is an often ignored part of the evolving web.
I am really surprised how proactive internet companies are being about security. Checkout how far etrade.com is going:
1. Free RSA token
2. Get a free assessment from Symantec Security Check. Get a free assessment from Symantec Security Check.
3. Plus discount on Norton Internet SecurityTM 2005
https://us.etrade.com/e/t/estation/help?id=1220000000
Also of note is the fact that etrade.com is making these offer visible. Companies are not trying to hide the fact that the internet is insecure.
Cheers
December 27th, 2005 at 7:14 pm
I think security is definitely going to take on an increasingly important role as we move more and more of our data online. It’s one thing to trust a company like eBay or Amazon with your account information, but now we’re being faced with trusting a lot of relatively new startups with information like our IM conversations, documents, and spreadsheets. Maybe del.icio.us has it right. Everything is public, so there’s nothing to hide.