MGiff....yrag and IPlural have listed in other threads what amounts to the "practice safe browsing" Guide. Maybe one of them will indulge us here with a list of must haves to be running to keep our PC's from getting knocked up with a little unwanted critter, while still using IE

I use IE6 and stay up to date with MS's updates. Norton's Antivirus and firewall, both up to date. I run adaware and spybot on a regular basis. My ISP...earthlink also provides me with a popup blocker, cookie killer, spyware blocker and a favorites stripper (strips tracking info from links you save). Also they scan my mail for viruses and spam, before it gets to my PC. My email addy is readily available through searching google and I only get about 3-4 pieces of spam a week and haven't been attacked by a virus, since I stupidly used my old email address on the MS newsgroup almost a year ago. Even then Norton's caught all the attacks.

Why are you confused, MGiff? If you're going to use IE or an IE shell (like MyIE2 my favorite IE shell) you should tighten up IE's security settings. I posted a couple links above to help. As I mentioned the more secure your settings the more likely some functionalities will be limited on some sites. Unfortunately browser security involves some tradeoffs of general functionality. Some really trusted sites can be put in IE's trusted zone, but IMO that should be used sparingly. (By the way, I recommend that one should tighten up IE's settings as long as IE is still on the PC, including installing all IE security updates since IE is part of the OS and some shared components are likely running or IE components can be invoked by another program or perhaps something on a web site one may visit. Even if you don't use IE to browse the net.)

Using another browser like Firefox, Mozilla or Opera generally is considered safer than IE for some of the reasons I noted above. That doesn't mean they make you absolutely safe on the net, nothing doees that unless you unplug your PC. But they are considered safer than using IE since so many b*stards have geared spyware and exploits to IE which is used by the vast majority of people online.

I also use Proxomitron, a web filtering app, to block ads, popups, etc. And some folks have made some filters that block some javascript stuff from doing things it shouldn't be doing. (I use JD5000's Proxomitron filter set, just in case anyone's interested.) I use this with all browsers and I think it does add a bit to security while I still have some functionality.

Online security is a matter of tradeoffs and risk management. No silver bullet. Sorry if I confused you, and don't want to scare you, but if you can be more specific about what's confusing you? It's just I spend some time on security forums and gads there are so many people who have been zapped by spyware, etc and it sometimes can be a nightmare to clean up some of this stuff. I don't claim to be an expert but I've learned a bit from people who are.

MGiff, why don't you just try out a couple alternate browsers and decide which one YOU like best, after all only you can make the final decision. I've tried Opera, Mozilla, and Firefox. My personal favorite is Firefox, with Thunderbird as Email client [nice built in spam filters] One of the extensions I addes to my Firefox is called IEVIEW which allows you to view any toublesome pages in IE. ALL Mozilla browsers also allow you to import all your IE Favorites. I'm sure with a little experimenting you'll find what the one that works best for you.

my apologies sig for not including you in the above post, MGiff...sig knows her stuff ....I'll go sit in a corner now.

bordfryr: Netscape is part of the Mozilla clan, an ancestor so to speak. I may be stating it a bit broadly, but basically the Netscape code was made open source and given to the Mozilla folks. So the Mozilla and Firefox browsers are the descendants of Netscape. Netscape is a bit old now so a number of Netscape fans have switched to Mozilla since it's still being developed and supported.

No prob, Essencay. Gary and IP can run rings around me on just about everything PC related. I'm just a PC security groupie.

Yeah MGiff, as tjesterb said, just check out various browsers and see how it goes. You have to be comfortable with whatever you use.

By the way, you haven't mentioned why you want to try something other than IE. Are you concerned about security? (Which is why some people have switched, that and/or they've gotten hooked on tabbed browsing.) Or have you been having problems with IE?

Sig, I keep reading and reading about the holes in IE and after several worms and viruses have invaded our family website I want to try other options. I run 2 spyware programs, AVG, 2 pop up blockers and a firewall. Am I just paranoid or am I doing enough? I don't want to be responsible for others in the family being infected but I don't want to be too paranoid. I have gotten so much good advice here, from you especially, and some great opinions and I'm gonna try one browser at a time. Right now I'm trying Opera. Once I've figured out tabbed browsing, I'll let ya'll know about it!

No you're not being paranoid. Unfortunately we need to be a bit "paranoid" with all the crap online now. It wasn't so bad years ago (the good old days, lol). Although I don't know why you'd need two popup blockers? Which ones are you using? (I know some popups are using some newer techniques intended to get around the usual blockers.)

What I'm most concerned about is your family website...is it hosted on your ISP? Another hosting site? Or are you actually running a server hosting your own site? Just trying to figure the situation to try and see if/how the web site was indeed compromised. That may be another issue that a browser tweak or change alone won't help. It depends.

Dumb but basic question: how do you know the family's website was compromised? Were people's AV's alerting on it or were they getting infections and then trying to figure where they were to get infected. What kinds or worms/viruses? While some can be transmitted by a compromised site/server to an unprotected browser, perhaps the majority of worms are either network worms that can be blocked by a firewall or email worms that require someone opening an attachment or file and no updated AV to catch 'em.

Just trying to narrow down the options of how people got infected and if the website was really the point or transmission. Can't tell without more info.

(Just btw, some people say they hate tabbed browsing...well they don't have to use it on Opera or Moz or Firefox, but it is an option that many of us have gotten used to. I like the latest Opera much more than the earlier versions fwiw. Firefox is cool too but Opera has been around longer and is a bit more "seasoned." Plus Opera also has its email progam and other doodads included for those who want to use them. It's just a matter of preference and which one you find easier to get used to. I have Firefox too but I've found myself mainly just using Opera at home.)
[Message Edited]

I'll go sit in the corner with Essencay....looks like sig101's got this one covered.

http://secunia.com/advisories/12027/ A hole in the Mozilla browser that makes it possible for attackers to launch unauthorized applications or crash computers.

http://secunia.com/advisories/12028/ A flaw in the Opera Web browser which can fool users into believing they're on a trusted Web site when they aren't.

Just pointing out that no browser is perfect. The popularity of IE alone makes it more desirable to evildoers to exploit.

/me goes back to his corner

http://archive.ncsa.uiuc.edu/SDG/Software/mosaic-w/

They all started here for the most part.

NCSA Mosaic Platforms:
NCSA Mosaic for the X Window System
NCSA Mosaic for the Apple Macintosh
NCSA Mosaic for Microsoft Windows


It has all come a long way since ARAPNET and NREN..

WWW has definitly come a long way since 1992 when released by CERN. Sad thing is, it has not kept up with the bloat, INet2 is up and running but that isn't going public any time soon me thinks...

Whatever became of black screens with white type. No one ever screwed with my computer on the old local BBS

For history buffs devavu.org has some interesting info, a browser timeline and browser emulators: http://www.dejavu.org/ And evolt.org has archived browsers too: http://browsers.evolt.org/

(BTW Tim Berners-Lee, often called the inventor of the WWW, was knighted last week by Queen Elizabeth. A couple articles here: http://news.yahoo.com/news?tmpl=story&u=/nm/20040719/wr_nm/tech_internet_inventor_dc_1 )

lol... lived it, don't miss it...

though I did run a BBS and was a FIDO Hub.

I do miss that to some extent.

In regards to #35: Mozilla had updates available in less than 24 hours, MS is lucky to get it in 24 days, and these security flaws in Mozilla, Firefox, & Opera, unless I'm mistaken, do not open up the users PC to the same level of vulnerability since third party browsers are not linked to the OS as IE is.
Sig101 feel free to back me up.......or shoot me down if I'm wrong....../me thinks he will find his own corners from now on....
[Message Edited]

Well it looks as if this has hit the point of diminishing returns...

color me gone from this one

Only gripe with Firefox: Why can't it automatically open windows in tabs?

Well you've stated the conventional wisdom about the IE/OS integration, tjesterb. I haven't yet played with IEradicator or 98 Lite on my old W98SE system to see what life without IE/OS integration is like on that OS. I guess it wouldn't make that much difference functionally although perhaps a bit safer maybe. Some folks who've done it have told me it's OK. They reinstall IE as a standalone browser since they still like it. I'm not sure if XPLite can accomplish exactly the same thing or not on XP. http://www.litepc.com/

From time to time there are vulnerabilities discovered in the moz/opera browsers, usually the serious ones are addressed fairly quickly. But nothing's perfect. I don't think the phishing exploit in Opera (the second link Essencay posted) has been addressed yet. I briefly browsed the Opera security forum and saw some people arguing that it wasn't a security issue (it sure is when they see it in IE, lol) or was only theoretical (even though there's a proof of concept exploit) and besides was only "moderately critical." One even accused the poster who mentioned it of trolling. Jeez.

For those who aren't familiar with phishing an example is those scam emails that claim to come from PayPal or a bank and you click on a link that leads you to a lookalike site and if you check the address bar it looks real. You might input your info or whatever thinking you're on a legit site and whamo the bad guys have it. So one should not mess with such emails and if there's any question if an email is legit or not, use a previous bookmark or type in the real url to go to the legit site. This is the most common use of phishing exploits, although funky links on websites could do the same.

Anyway, it is a plus that Moz/FF and Opera aren't incorporated into the OS like IE. Kevin McAleavey (developer of BOClean an antitrojan app and other programs) has ranted about the dangers of IE's OS integration for years. He sees how malware works at the system level so I'd guess he'd know what he's talking about. Still some exploits are possible with Moz/Opera although IE remains the main target. Arguably they wouldn't be as bad as IE's with its direct mindmeld with the OS, but any security/privacy compromise ain't good. There's nothing 100% safe as long as a PC is in communication with the outside world in some fashion.

One option/recommendation is to disable scripting including javascript in all browsers to be safer since even js can be a way for malicious script to run. But although one can function reasonably ok on the net without IE's ActiveX, javascript is used so frequently it's sort of difficult to do without completely (even the smilies here use js).

People just have to figure what their needs and comfort levels are vs. the potential risks. And take reasonable precautions. It just P's me off that we have to concern ourselves at all with all this crapola. But mainly I'm lazy so I take precautions so I don't have to deal with cleaning up a PC or reformating, etc.
[Message Edited]

juni: FF is designed to be lean and then additional functionalities can be added via the use of extensions. Rather than having a whole bloated browser with all functions possible loaded, you can set it up the way you want it by adding extensions. See if this helps if I've not misunderstood the issue: http://texturizer.net/firefox/tips.html#beh_reuse
[Message Edited]

Ok, that is exactly what I need, thank you

please forgive the intrusion, but since the discussion is about Firefox, does anyone know how I can fix it so that when I close the last tab, there's nothing left or my blank page is shown? It bothers me that when I close the last tab the existing web page is still showing.

Thanks,

david

You got me, I dont do the tab thing with firefox

Only gripe with Firefox: Why can't it automatically open windows in tabs?

I hated that too when I first started using Firefox, then by accident I discovered something. If you click on a link with the mouse wheel, it will open that link in a new tab. It was that discovery that has kept me using Firefox.

#42 by juni - 7/20/2004 12:10:55 AM Only gripe with Firefox: Why can't it automatically open windows in tabs?

#48 by Scribe Hus - 7/21/2004 8:44:02 PM I hated that too when I first started using Firefox, then by accident I discovered something. If you click on a link with the mouse wheel, it will open that link in a new tab. It was that discovery that has kept me using Firefox.

http://update.mozilla.org/extensions/moreinfo.php?application=firefox&id=50&vid=53

#46 Werewolf, If I understand your question, here is how to have a blank after closing all tabs[though I don't know why you'd want that] Tools>Options>General, in Homepage section set homepage to Blank Hope that helps.
[Message Edited]