Microsoft has released a software update for Internet Explorer that will patch security flaws — but should you switch to a different browser?  It’s been a worrying week for computer users. Internet Explorer, the world’s most popular web browser, was found to have a serious security flaw that could have put millions of computer users at risk from cyber criminals and hackers.  The browser is thought to be the weak link that allowed hackers to carry out a sophisticated and highly targeted cyber attack against Google earlier this week, which resulted in the search giant reconsidering its operation in China.

It also sent entire nations in to a spin. The governments of France and Germany warned their citizens not to use Internet Explorer, and to switch instead to a different browser. The British government declined to follow suit.

Microsoft has now released a “patch”, to plug the hole in the browser’s code and protect it against the vulnerabilities that allowed Chinese hackers to break in to the Google email accounts of dissidents and human rights activists, and compromise the security of other large corporations.

But many computer users are wondering whether they should consider using a different web browser, such as Mozilla’s Firefox or Google Chrome.

“The patch should resolve the current problems with Internet Explorer, but the big question is, will people install it?,” asks Graham Cluley, a security expert with Sophos. “Some people can be very lackadaisical about installing these software updates, but they really need to start to get in to the habit of updating their computers – companies such as Microsoft release these updates for a good reason.”

Cluley says that Internet Explorer 6 is the most vulnerable web browser, yet it is still used by big government agencies such as the Ministry of Defence. This is a hangover from the early days of the web, when IT departments wrote systems and software that was only compatible with Internet Explorer 6, making it tricky and expensive to migrate to more stable and secure versions of the browser further down the line.

“If you’re using Internet Explorer 6 at home, you should upgrade to internet Explorer 8, the latest and greatest version of the browser,” advises Cluley. “It’s also worth considering a different browser altogether. The new version of Firefox is very good at updating itself to keep web users protected. It will do a much better job of securing the whole web experience.”

Despite the global dominance of Internet Explorer – it accounts for 63 per cent of the whole browser market – there are plenty of alternatives available to computer users. One of the most popular is Firefox, which has a 25 per cent share of the browser market worldwide, but is attracting lots of new users in Europe, accounting for 40 per cent of that search market, just five per cent less than Microsoft.

Indeed, while Graham Cluley says that no web browser is completely secure, he thinks diversity in the browser market benefits everyone. “Internet Explorer is attractive to hackers and virus writers because it dominates the market,” he says.

“Encouraging a bit of variety makes it harder for hackers to impact lots of people.”

No Comments  Email This Post

• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 

Responding to a highly sophisticated cyberattack on opponents of the Chinese government, Google said Tuesday that it is no longer willing to operate a government-censored search engine in China — and may shut down its Chinese operations altogether.

Google’s stunning announcement could cost the company billions of dollars in lost future revenues, since experts said it’s unlikely the Chinese government — which broadly filters Web content and blocks access to social networking sites such as Facebook — will back down and open up what has been dubbed “the Great Firewall.”

But the search giant’s move may pressure other U.S. Internet companies doing business in China to take a stance on government censorship, and it will almost certainly complicate U.S.-China relations.

In a lengthy posting on its official company blog Tuesday afternoon, Google said it had uncovered a “highly sophisticated and targeted” cyberattack in December originating in China against Google and at least 20 other companies in which hackers attempted to gain access to the Gmail accounts of Chinese human rights activists.

Google said those attacks, combined with Google’s subsequent discovery that the Gmail accounts of dozens of Chinese human rights advocates in the United States, Europe and China were being “routinely accessed” by unknown third parties, prompted the company to reassess whether the world’s leading search site should continue to operate in the world’s biggest internet market.

Google’s withdrawal from China would come with a major financial cost; its stock was already sinking in after-hours trading Tuesday. While Google is a distant second to the Baidu search engine in China, the rapid growth of the Chinese market means future lost revenues could be enormous.

“Its future value certainly will be huge, just by virtue of the sheer size of the market. The opportunity cost to Google might be many billions of dollars over time if they were to pull out — almost certainly,” said analyst Greg Sterling of Sterling Market Intelligence. “I just think it’s kind of a courageous move of integrity.”

The surprising move could reset Google’s image back to its “Don’t Be Evil” idealism after recently taking on, in the eyes of some, the appearance of an Internet juggernaut seeking to control the world’s information.

“In a world in which we are so used to public relations massaging of messages, this stands out as a direct declaration. It’s amazing,” said Jonathan Zittrain, professor of Internet law at Harvard Law School and co-director of Harvard’s Berkman Center for Internet & Society.

The Berkman center worked with Yahoo, Microsoft, Google and United Kingdom-based mobile phone company Vodafone, as well as human rights organizations and investment groups, to develop a code of conduct for operating in countries that censor Internet activity.

“There is something special about the Google brand and the accommodations it made with the Chinese government to let Google China go forward was almost in friction with that. I sense an almost relief from the company saying, ‘Why do we have to do this?’ ” Zittrain said. “I think the Chinese are going to say, ‘Bye-bye Google.’ But just think about what happens if Google’s engineers set about making information as accessible as possible in China.”

Other analysts, however, said Google’s lack of traction in the Chinese market might have made the decision easier.

Google’s declaration and the accusation of China-based cyberattacks will further complicate U.S.-China relations, said Susan Shirk, a former deputy assistant secretary of state in the Clinton administration responsible for U.S. relations with China. “It adds to the already difficult agenda we have with China. It’s not going to be easy.

“I presume that Google has pretty strong evidence, otherwise they would not make this public statement and declare battle with Beijing,” Shirk said.

A Google spokeswoman said the company would not reveal the identity of the other companies targeted, but said they included companies from the Internet, finance, technology, media and chemical sectors.

Google does not have evidence that the Chinese government was behind the attacks, she said, but “we do know it originated in China.”

San Jose software-maker Adobe Systems is investigating what appears to be a related incident, which Adobe described in a statement as “a sophisticated, coordinated attack against corporate network systems managed by Adobe and other companies.” Adobe said it didn’t appear that any sensitive information had been compromised.

While Google filtered some information on its Chinese Web site, Google.cn, its filtering efforts were far less extensive than those of its China rival, Baidu.com, the country’s largest search engine, said Rebecca MacKinnon, an expert on Chinese censorship.

“It certainly has been looking like it has been in a no-win situation,” she said, adding that Google had apparently concluded: “If we are making public declarations about upholding our users’ interests, at some point we have to stand up for our users’ interests.”

Google, which refused to place its servers in China and did not offer services that required it to collect personal data on users, most likely believed the hacking put users at risk, MacKinnon said.

The move, she added, “is an unprecedented situation” and will reverberate in China.

“It certainly sends a message to people in China when the world’s biggest Internet company says China’s policies for controlling the Internet are not acceptable,” she said. “When Google stands up and says things have gone too far in China — people are going to think seriously about that.”

2 Comments  Email This Post

• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
•