冰灵博客

For the longest time in hacker folklore Internet Explorer and Microsoft Windows were the key targets and most exploitable while Macintosh and Safari were virtually ignored. But times they are a-changin’, roles are reversing, and Google’s Chrome comes out as a dark horse.

Researchers entering the Pwn2Own browser exploit contest at CanSecWest in Vancouver delivered bad news to all three major Web browsers. IE, Safari, and Firefox were all cracked, leaving Google’s Chrome unbroken. When the researchers took a crack at smartphones like the iPhone, Blackberry, and Android, they also fell short.
But the bigger news is the insight Charlie Miller, a security researcher for Independent Security Evaluators who cracked a fully patched MacBook Air through Safari, gave ZDNet in an interview. Miller labeled Mac OS as the easiest of the bunch to exploit while naming Firefox on Windows machines one of the most difficult, and Chrome as almost impossible.

The difficulty Chrome presents, said Miller, is a reason why hackers, especially those in the contest, largely ignore it. Google’s browser is just too much work.

“There are bugs in Chrome but they’re very hard to exploit,” he explained. “I have a Chrome vulnerability right now but I don’t know how to exploit it.  It’s really hard.  The’ve [sic] got that sandbox model that’s hard to get out of… I might have this bug and I might be able to get code execution.  But now you’r ein [sic] a sandbox and you have no permissions to do anything. You need another bug to get out of the sandbox. Now you need two bugs and two exploits.  That raises the bar. “

On the other hand, Mac OS is the easiest, and with rising popularity of Apple machines, it becomes a more attractive target. Over the decades, the sheer ubiquity of Windows machines made Microsoft the biggest target, leaving Mac machines virtually ignored by the hacker community.

Miller suggests it’s the operating system more than the browser these days, and the folks at Microsoft have made it very difficult to exploit Windows via anti-exploit mitigations and randomization, “two hurdles” lacking on Macs.

While Firefox is just slightly more difficult to exploit than IE 8, in Miller’s estimation, the killer combination is Firefox on Windows. “It’s really hard to exploit Firefox on Windows,” he said. “For all the browsers on operating systems, the hardest target is Firefox on Windows.  With Firefox on Mac OS X, you can do whatever you want.  There’s nothing in the Mac operating system that will stop you.”

Internet Explorer 8, which Microsoft has put into beta testing since more than a year now, has finally released a few minutes ago!

Microsoft has made sure everything goes on well, and has come out with the fastest Internet Explorer ever. Lots of performance improvements and security updates have been made. I’d recommend everyone to give it a try once!

Features Overview:

• Faster Internet Explorer 8 is more responsive with new pages and tabs, opening up fast and reliably. You can now get to the information you care about most, in fewer steps; one click access to your webmail, favorite news sites or other online services.
• Easier Reduce the steps to accomplish many common tasks, and automate your access to real time information updates. You can keep track of your favorite sports team, news, weather with a single click.
• More Private Helps protect your privacy and confidential information where ever you go on the web.
• More Secure Helps protect and stop malicious software from reaching your PC, and makes it easier to detect when a website is an imposter.

Or you can check out the IE8 features review done by us.

After using the beta and RC releases, I’m impressed how Microsoft has worked hard to put IE back into the browser-war! IE8 is available for Windows XP, Vista and Server 2003 and 2008. I don’t see any IE8 links for Windows 7. Looks like, Microsoft has something else in mind for the Windows 7 users.

Download Internet Explorer 8

You can download Internet Explorer from the download page link given below.

https://www.microsoft.com/windows/internet-explorer/worldwide-sites.aspx