Internet Explorer 7 to have tighter security zone settings



One of the changes Internet explorer 7.0 will see is a tightening of restrictions on the zone settings. Currently, there are four security zones for web sites: Internet, Intranet, Trusted Sites and Restricted Sites. Explorer tries to autodetect if a site is within the intranet (which becomes more trusted), or the internet (which becomes less trusted. The problem is this detection can be tricked and so, malicious websites can run in a less restrictive zone.


The fix for the problem is to NOT use the intranet zone unless the machine is part of a Windows Domain. One question I have is… does this mean that in a Windows domain environment, there’s still the possibility that a malicious site could masquerade as an intranet site? It sounds like that may be a chink in the armor. (How about not enabling intranet for ANY installs by default?) Though there is further detail that other zones will get locked down a bit tighter too…

Microsoft is also taking steps to lock down the Internet and Trusted Sites zones.

If a URL is in the Trusted Sites, it is given complete access, such as automatically installing ActiveX controls without permission. However, such capability has opened the zone up to abuse. For example, malware could automatically add a malicious site to the Trusted list. That will change in IE7.

In the future, Trusted Sites will be given a default security setting of Medium, the same level as the Internet zone in IE6. Users can manually change the security level back if they so please. “We find that many users don’t understand how powerful a site becomes when they make it a Trusted Site,” says Gupta.

The Internet zone in IE7 has been moved to a new Medium-High security setting. The change means ActiveX controls will be disabled by default, and users must enable them as needed through the yellow Information Bar. Windows Vista will go even further by running in a “Protected Mode” that runs IE in isolation.

Related Posts

Blog Traffic Exchange Related Posts
  • Takedown phishing sites Sunbeltblog has a good post on a group that helps "take bad guys out". The Internet Crime Provention and Control Institute (Link expired). Basically, they will take submissions of complaints and assist in getting sites taken down. A good example would be phishing sites, maybe servers hosting illegal content, stolen......
  • Network Security guide for the home or small business network - Part 2 - A Software Firewall Do I really need a hardware firewall? I'm running XP Service Pack 2 with the built in firewall? (or norton, or zonealarm?) Well, personal firewalls (the name that software firewalls go by) are good for a great many things that hardware firewalls AREN'T. They do have their limitations though and......
  • Update on the Internet Explorer VML vulnerability Just catching up on the days VML vulnerability news from today.... It looks as though... the exploit is now MUCH more widespread this blog has some video of an infection, what's notable is that the first take was VERY UNEVENTFUL, it was used to stealthily install a keylogger. (So that......
Blog Traffic Exchange Related Websites
  • Reasons to Start Blogging In the 1990's people started to set up websites know as web logs, a term which has been colloquially evolved into the term blog. A blog is a internet website where users post regular article, providing commentary, information, news, and various other forms of posts. Why do individuals start blogging?......
  • Get Far More Site Visitors To Your Web Site We all know that site visitors will be the most important thing for a profitable Web enterprise company. You'll find lots of dependable approaches to jumpstart your traffic flows, though most of them would price some money. In this write-up I'd like to tell you about my favorite internet promotion......
  • Free Private Label Rights The crazy world of the web is a booming business and many find out how the Plr (PLR) is the latest method to earn money simple and easy , inexpensively. All that is needed for this is to buy the products, E-Books, videos, software, etc that you are interested in.......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site