Penn State Tells Students To Ditch IE 486
Hoyceman writes "About 80,000 students and staff are being told to use an alternate browser. The Penn State ITS department sent the alert 'because the threats are real and alternatives exist to mitigate Web browser vulnerabilities.' InformationWeek is carrying the story."
About time (Score:5, Funny)
Re:About time (Score:2, Interesting)
Re:About time (Score:3, Interesting)
The college students don't give a hoot as to what they are running, so long as they can screw it up. Remember the GNVQ Computer Studies reboot technicians can do little else than delete files. The Art students don't care if it says "Internet Explorer" or "Mozilla FireFox" at the window title, just so long as they can access hotmail.
The colleg
I actually took it to the boardroom (Score:5, Interesting)
I pointed out that students get zero education on computer security, and that if they really wanted to fix the problem, they would create a 1 credit required gen-ed course on personal computer security. Students would thus be required to learn how to keep junk off their desktops one hour a week for a semester (plus it would be an excuse to give remedial computer usage insruction to some of the freshmen that come from living-under-a-rock high school.)
That idea raised some eyebrows. They said "now, THAT's thinking out of the box." They diligently noted it in their notepads and pointless PDA gizmos.
And then, did absolutely nothing.
But that's about what I was expecting, that just because they had the wherewithal to recognize a good idea when they heard it, didn't mean they would remember it for more than a week. That's not how it works. If it doesn't reach crisis proportions, these types of people don't do crap about it.
Re:I actually took it to the boardroom (Score:3, Funny)
Re:You are kidding me! (Score:3, Informative)
After a few weeks, most people realize that they can skip the classes and only show up for exams, so it's not really a waste of time for those who do not need it. However, for those who do, it ensures that they
Re:About time (Score:2)
The irony is killing me.
That and the fact that the passage of time appears to mean nothing to you. Yes, I wrote powerusrs gaming(even though it hasn't been updated in over six months), worked on two RPGs written in a long dead programming language, and wrote all the journal entries in the time that I've been in college. Yep. Never done anything else, I've lived my entire life in college.
I think we should create some sort of organization for people to whom the phrase "delta-t" means
Re:He's not all that smart (Score:2)
Being attacked by the parent you're replying to is actually funny, because he doesn't seem to have taken a look at the dates involved. I've been so busy I haven't even been able to look at the code for my projects or update my site since march. Look at all the free time I have! Wheeee!
If a site that hasn't been updated in 6 months and a year old rant written while I was drunk are all you've got, I can honestly say my life isn't so bad. Busy so I can't return to my old projects or spend time writing journal
Re:About time (Score:3, Funny)
Support is important. (Score:3, Insightful)
Sometimes, thanks to clueless professors, I've needed to use IE. I actually talked to two professors about using standards instead of cheap development tools that foist garbage on their students and would require expensive software and break in a year or two.
Nice! (Score:2, Interesting)
Re:Nice! (Score:2)
Hopefully they understand how to detect Internet Explorer [ericgiguere.com] server-side and further encourage relunctant students to switch.
EricRe:Nice! (Score:5, Insightful)
Re:Nice! (Score:3, Interesting)
The IT director that works there is a good friend of mine. when he took the IT position I helped him out for awile and eventually worked there while I was still in college.
Security was priority one there. We didn't screw around when it came to protection of the network. We also understood that our PC's had to be rock solid since they had direct static IP connections to the internet.
Virus wise, I can r
Article text (Score:4, Informative)
Penn State Tells 80,000 Students To Chuck IE Dec. 10, 2004
A public university with an enrollment of over 80,000 puts the kibosh on Microsoft's Internet Explorer.
A public university with an enrollment of over 80,000 put the kibosh this week on Microsoft's Internet Explorer, and urged its students to switch to alternative browsers such as Firefox, Mozilla, Opera, or Safari.
Penn State University on Wednesday issued an alert to students and staff recommending that they dump IE and use a different browser.
The university's Information Technology Services (ITS) gave the advice "because the threats are real and alternatives exist to mitigate Web browser vulnerabilities," ITS said in a statement. It cited the security problems in IE that have been the focus of both media reports and recommendations from such organizations as the US-CERT, the federally-funded computer response team housed at Carnegie Mellon University.
"The University computing community [should] use standards-based Web browsers other than Internet Explorer to help minimize exposure to attacks that occur through browser vulnerabilities," added ITS.
Penn State's advice is the latest negative news about Microsoft's popular browser. Security problems continue to plague IE -- some patched, some not -- while rivals like Firefox slowly nibble away at its still-dominating market share.
Now the question is... (Score:5, Insightful)
Re:Now the question is... (Score:5, Informative)
Re:Now the question is... (Score:3, Interesting)
Re:Now the question is... (Score:3, Insightful)
But it's fixable. (Score:2, Insightful)
But Firefox, being open-source, can be fixed so as to eliminate the need for workarounds. The IT department can coordinate with the project developers and find solutions. Something closed-source doesn't do nearly as well.
As annoyed as I am with Microsoft in general, if they would make the Windows XP source code shared-source, I'd track down and fix bugs I found. I wouldn't min
Re:Now the question is... (Score:2)
Re:Now the question is... (Score:2)
Re:Now the question is... (Score:2)
What's so special about students that people forget that they're shelling out big money for a university that works? People don't write code for microsoft, why should they write code for their inept college IT dept?
People still use IE? (Score:3, Insightful)
Re:People still use IE? (Score:3, Insightful)
Of course people don't still use IE on Mac OS X, because everyone knows it sucks ass. That has nothing to do with millions of Windows users who DON'T know any better.
Re:People still use IE? (Score:3, Informative)
Re:People still use IE? (Score:3, Insightful)
No, no it's not.
It's neither as "good" as MSIE (6.x) for Windows, nor a solid browser for Mac (OS X).
OS 9 is another matter, but the stability and utility of MSIE running atop OS X is dreadful. It's less stable, somehow, than the OS 9 version ... and as you point out, its feature set doesn't compare well to at least two common alternatives for OS X: Safari and Firefox.
It's good enough fo
Re:People still use IE? (Score:2)
In Other news... (Score:2, Funny)
Re:In Other news... (Score:3, Funny)
Why, oh why, aren't there more nerds with an appreciation for both intellectual pursuits, and the fine art of kicking the crap out of someone? WHYYYYY?!
Good move! (Score:5, Insightful)
Kudos to Penn State for not falling into the "it's built into the OS so we'll use it as a standard!" trap.
At Harvard... (Score:3, Interesting)
Re:Good move! (Score:2)
Good school. Bad football team. Go JoePa.
Temple not quite that far (Score:2, Interesting)
Any guesses what Microsoft's response will be? (Score:3, Insightful)
2) They'll sue
3) They'll go on a charm offensive
4) They'll spin the virtues of Longhorn
5) They'll talk about IE's innovative approach to browsing
Others...?
Re:Any guesses what Microsoft's response will be? (Score:2, Funny)
2)
3) Profit
Re:Any guesses what Microsoft's response will be? (Score:5, Funny)
6) They'll cut the price.
Re:Any guesses what Microsoft's response will be? (Score:3, Funny)
Well, its possible... right?
Nothing (Score:2)
Re:Nothing (Score:2)
Microsoft likes to purport that IE is the most used based on merit alone, which is blatantly false. And, as more people start using alternatives (at this point, Firefox being the best for Windows, with it not only being completely fre
Re:Any guesses what Microsoft's response will be? (Score:5, Insightful)
At this point, Microsoft needs to pay for market share and mindshare. IE can't compete at its current price (free/bundled), so they'll lower it.
Re:Any guesses what Microsoft's response will be? (Score:2)
6) If you don't use Internet Explorer, we will kill you.
#1a (Score:2)
80,000 (Score:2, Informative)
Go, Lions!!! (Score:4, Funny)
Joe Pa...
Joe Pa...
I say M.O., you say 'zilla!
...'zilla!
...'zilla!
M.O....
M.O....
(pause)
MOZILLA!!!
Re:Go, Lions!!! (Score:2)
We are...
We are....
Now I say "We are", you say, "using an open-source, secure and standards complaint browser!"
Hmm...just doesn't have the same ring to it...
Brown's been saying this and acting on it (Score:5, Interesting)
Re:Brown's been saying this and acting on it (Score:3, Funny)
The interesting thing is that I have had several people call us this semester asking how to uninstall Internet Explorer. I usually give them a quick rant. Today, I told someone asking me the same question to go watch Antitrust [imdb.com].
security through obscurity (Score:3, Insightful)
But make sure that your alternate browser it is a recent version of Firefox or Mozilla. They have responded very quickly to security issues, and are being proactive about security, much more so than the the people behind Konqueror or Opera. Also, keep your alternate browser patched just as vigilantly as you would Internet Explorer. As the popularity increases you will see more attacks against Mozilla based browsers.
I don't know what the answer to security is. I hope it isn't educating users, because that just plain doesn't work for most people. The problem is that right now there doesn't seem to be any other way.
Re:security through obscurity (Score:4, Insightful)
Re:security through obscurity (Score:4, Interesting)
I'm sorry, but that is FUD. Opera will be the first browser to patch the latest, cross-browser, issue [secunia.com].
A fixed 7.54u1 is being distributed at this moment. See the Opera advisory [opera.com].
And as far as solutions go: why expect perfect safety online, when we don't have it offline either? Software should improve, online systems should be more secure (it is stupid if money can change hands online only secured by a single login), and most people will smarten up in time. Perfection will not be reached.
MSIE has a track record of leaving critical holes open for a while, but most reported holes are not critical. And MSIE is much more informative about it issues than either Opera, which only recently started publishing advisories, and Firefox (what advisories?) Selling Firefox purely on the safety issue will come back to bite it in the long run.
Re:security through obscurity (Score:2)
I think firefox and mozilla have a similar workaround also. It should also be pointed out that this workaround is the most advised configuration to run konqueror in since the smart policy means that popups can only open as a response to use clicks and never just on their own. This makes it more useful then just a regular po
Re:security through obscurity (Score:2)
safari? (Score:4, Interesting)
Re:safari? (Score:2, Interesting)
Re:safari? (Score:2)
I am a Mac user myself and find it hard to imagine chosing the clunky IE over Safari. Safari, despite being a little less-featured than Firefox (none of the new RSS tricks) is a very nippy little app that serves my needs. Unlike IE, it doesn't give me CSS rendering issues either.
Re:safari? (Score:2)
Re:safari? (Score:2)
Re:safari? (Score:2)
Re:safari? (Score:3, Interesting)
A live hand grenade with the pin pulled is less dangerous than IE for Windows.
True, IE for Mac doesn't have any of the vulnerabilities of its Windows cousin. For one thing, when malware tries to install to "c:\windows", Mac OS says, "Huh? What?" That, plus the fact that the Mac development team wrote the browser from scratch, so the two have little or no code in common.
IE for Mac is getting quite old, but it still has its uses. It
Re:safari? (Score:3, Interesting)
Go download it, and tell me I'm wrong.
p
Security (Score:5, Interesting)
But even without security, FireFox is just plain better. Tabbed browsing is huge, Bookmark toolbar, extensions, find-as-you-type (HUGE improvement over CTRL+F search)... Now I look at IE (the rare time I need to open it for windowsupdate) and it just feels...dirty.
Integration nonsense. (Score:2)
It's funny how KDE does not suffer the same kinds of problems despite having better "integration". Ease of use does not have to be a security nightmare. With Konqueror, I have access to sftp, ftp and other network shares as if they were local files, drag and drop easy with split screens and multiple tabs. Floppy and CD mounting are as easy as click
Funny, I got my account disabled for using Firefox (Score:5, Interesting)
Recently I became unable to login to my student account, with a message "Your account has been disabled, please speak to your network administrator."
Well I went and found my network administrator [mailto] to ask about what was up. Apparently it is against school policy to install programs on their computers. This is totally understandable and reasonable, and I apologized. But he decided I needed to be chewed out and he had a killer fact that he just knew would crush me.
Looking me in the eyes he proceeded to tell me that due to me installing Firefox and Winamp on two of the open lab computers they no longer function and had to be totally reformatted. This man, who is in charge of keeping the school network secure, seriously thinks that Firefox and Winamp could possibly be the root of a computer's DEATH. I did not argue the matter no matter how ridiculous it is; I just wanted my account back.
How is it they let people become the network administrator for an entire technical college, a college that hands out degrees in technical fields, that are just that ignorant. How can any competent network admin possibly think Firefox and Winamp are causing a computer to not boot?
So now under threat of permanently losing my student account I am forced to use IE. It is excruciating, because I am not the only person installing software on the open lab computers, just the only one knowledgeable enough to install useful non adware-infested programs. Just opening Internet Explorer results in about 3 minutes of closing popups.
Re:Funny, I got my account disabled for using Fire (Score:2)
I've heard of running Firefox/Thunderbird off of USB Jump Drives. Then you get to keep your bookmarks too. You'd have a case that you didn't "install" anything on any lab computer.
Re:Funny, I got my account disabled for using Fire (Score:2)
Re:Funny, I got my account disabled for using Fire (Score:2)
I remember the beta versions that would unzip to a single directory, and clicking the executable would run the browser without running any form of setup.exe or other installation file.
Has the program changed that much where special tweaks and hacks are required to make it a standalone executable?
Re:Funny, I got my account disabled for using Fire (Score:2)
Re:Funny, I got my account disabled for using Fire (Score:5, Insightful)
You are dealing with a Windows admin. For many of them, the common reason for everything is that the problem is someone else's fault. That someone else being a combination of Microsoft, Firefox, Winamp, the computer's mood that day, some virus, "an act of God," or hackers that don't really exist. Don't take it personally.
Re:Funny, I got my account disabled for using Fire (Score:2, Insightful)
You should educate him about Norton Ghost (Score:2)
"Just opening Internet Explorer results in about 3 minutes of closing popups"
So why were you putting your head in the sand by installing two pieces of software that had nothing to do with the problem? No wonder you got chewed out. You using FireFox and Winamp aren't doing anything to help.
If you want to make yourself useful you s
Re:Funny, I got my account disabled for using Fire (Score:2)
You should ask the admin why he allowed common users to install software in the first place. I bet he doesn't even know how to prevent that.
I recommend not storing any of your personal files on computers he manages, because they'll probably be e-mailed to the world by a worm, soon.
Re:Funny, I got my account disabled for using Fire (Score:3, Insightful)
How is it they let people become the network administrator for an entire technical college, a college that hands out degrees in technical fields, that are just that ignorant.
Because technical colleges are a joke as far as technology degrees are concerned. They also probbably pay jack shit to a network administrator, so they wind up with people who believe in computer voodoo. i.e. "it must have been that mysterious fire-fox and win-amp that those damn kids are all hopped up on these days." Remember, to
Re:Funny, I got my account disabled for using Fire (Score:4, Informative)
I would definately recommend Deep Freeze for any place with requirements like this. Put all the user profiles and documents on a central server, cluster or removable media and make permanent local changes impossible.
Viruses on the document storage area should be the only malware left; if you put it on a server, it can be scanned easily.
* It's not quite full admin, as you can't install new services or drivers; they might mess with Deep Freeze.
Re:Funny, I got my account disabled for using Fire (Score:4, Insightful)
If this is their public face, it most likely means that the place is run by total dicks. You're better off switching to a different school.
Re:Funny, I got my account disabled for using Fire (Score:3, Insightful)
You also have to realize that although you consider yourself to be more knowledgeable than this admin, there are lots and lots of users who are way, way lower on the scale. At my school, the network admins are currently squabbling with the faculty over an attempt to keep faculty from attaching their own dekstop machines to the campus network. Well, I really don't think the FreeBSD box on my desk is
Re:Funny, I got my account disabled for using Fire (Score:2)
As a result of thi
Re: (Score:2, Insightful)
Article Misleading (Score:5, Informative)
Re:Article Misleading (Score:3, Interesting)
Publicity stunt (Score:3, Insightful)
Guess who was most affected by the worms? The engineering department which requires logging onto the domain with your student ID and who run Windows 2000.
The College of Ed tech support people actually did their job and that prevented a lot of problems. So the fact that the IT people of Penn State are sending out a warning to 80,000 students just makes me laugh.
Our wonderful IT deparment can't even keep the network running reliably during heavy usage times such as pre-registration week and when grades come out.
IE and Windows aren't the problem.
Sending out a rediculous warning e-mail isn't going to do anything for them or the open source movement. People keep telling me the sky is falling and I've yet to see it actually happen to my systems.
A better solution would be to educate the students on where to get the free VirusScan software from the university and how to keep it up to date along with their Windows system.
It doesn't matter what browser you're using. It needs to be kept up to date.
Re:Publicity stunt (Score:5, Insightful)
I see PCs all the time which have IE up to date as well as have up to date anti-virus software that are *still* plagued with problems. Why? IE vulnerabilities.
Even for a patched system, IE presents a vulnerability for computers that are used for "general" web surfing. Firefox is a perfectly valid recommendation, even for those with up-to-date systems.
Hasn't firefox et al reached... (Score:2, Insightful)
the headline should be "From the Big Frikken (Score:2, Insightful)
Re:the headline should be "From the Big Frikken (Score:3, Insightful)
Most Windows users don't know anything about the alternatives. Remember that the majority Windows users are very uneducated about computers other than knowing how to move a mouse and click stuff. Microsoft and Dell/HP/Gateway/etc. sold millions of these computers because of "ease of use" and because of relatively low cost (compared to, say, a Macintosh; to most of these types of users, they'd buy the $399 Dell or HP over the $799 eMac, even though the eMac is more full-featured and immune to Windows malwa
My University did this a month ago. (Score:3, Informative)
To Selected Members of the Yale Community:
We wanted to send you an important reminder about your privacy and
security while browsing the Internet. We are concerned about certain
vulnerabilities inherent in Microsoft Internet Explorer (MSIE). Even if
you do not use this application as your browser, you should consider a
read through for information about keeping your computer updated.
Due to its popularity, MSIE has increasingly been the target of technical
exploits and sophisticated "phishing" schemes. We strongly encourage you
to take certain precautions for your own security:
1. First and foremost, verify that your computer is updated with current
patches and updates. The best and easiest way to do this is to set your
computer to automatically update its operating system and antivirus
software. If you need assistance doing this, please see below for contact
information.
2. There are known vulnerabilities in MSIE that do not yet have patches.
This has happened in the past and appears likely to happen again in the
future. We recommend that you either:
a) Refrain from visiting unknown websites or providing personal or
financial information while using MSIE, unless you are absolutely certain
you are dealing with a truly reputable website (for example the CDW-G
website in the Yale ePortal).
b) Use an alternative web browser such as Mozilla or Safari. The Yale
Software Library (www.yale.edu/software) provides recommended alternatives
that are easy to install and provide the same basic functionalities as
MSIE. There are some web pages that will only display properly in MSIE
(since it contains certain special proprietary functions), but most web
browsing can be accomplished using the alternatives.
A good start... (Score:2, Insightful)
Re:A good start... (Score:2)
Just to point out the obvious, mandating the install of pc spyware/adware programs could only apply to those computers running a microsoft OS. The tech savvy folks using linux, OSX or other unixlike OS are not
My previous employer has gone backwards. (Score:5, Interesting)
They've recently been merged with/taken over by a larger college in a nearby town, and the surviving IT department is in the process of converting the site from
Common Sense doesn't always win.
IE is evil (Score:2, Interesting)
Project (Score:3, Interesting)
Additional links and story details (Score:3, Informative)
I submitted this same story with a lot more detail (but not the InformationWeek link) 28 hours prior to the timestamp on this story. It was rejected. Sure, mod me off-topic if you think I'm whining.
I posted my write-up in my journal [slashdot.org] for posterity's sake. Replies are welcome on this post in regards to the actual news story. Comments as to why you think the submission was rejected should only be posted in the journal. (You don't want to be off-topic, right?) Did I submit at the wrong time of day? Was the submission too long? Ok... enough whining.
I won't make you do unnecessary clicking, so here are some of the relevant links that I found:
Penn State's own news article [psu.edu]
Chronicle of Higher Education article [chronicle.com]
ZDnet article [zdnet.com]
The journal entry [slashdot.org] also has comments taken from a PSU IT personnel listserv, as well as other links.
Probably the wrong approach (Score:3, Interesting)
My school has a slightly different way of dealing with this (at least for dorm computers): If your machine appears to be infected, they cut your internet access. Then, they'll fix your computer and give you a talk about security, but only once.
If you get infected again, you lose internet access, and don't get it back until you demonstrate that your machine has been reformatted. Every time. All of a sudden, even the most non-techie people start to be a little more careful, and start listening to you.
Is it really news? (Score:5, Insightful)
I'd rather say that universities are going back to their roots. IE was designed for home computers and the Joe User, not for universities.
Re:Quit Using IE (Score:3, Informative)
When I am on campus and need to print something(something that seems to come up fairly often since most hw assignments for certain classes are avaialable only online), I always laugh at the fact that students are willing to stand in line and wait for a windows computer rather than use the Macs which are always available. Doesn't bother me though, I just go right to the front of the line and go in, do what I need to do, and get out. I highl
Re:Quit Using IE (Score:2)
Maybe it's because of the lack of floppy drives on the non-beige Macs, and students lack of a USB pen (or FTP server). Despise Jobs's (and now Gates's) efforts, floppies are still alive in many places. At my school, the same scenario as yours occurs. In the library's open lab, there are about 50 PCs with Windows 2000 and 5 Macs with Mac OS 9. The Windows PCs are usually always taken and a line always form, whereas nobody touches the Macs there, so whenever I'm in the library and need a computer, I jump
Re:Quit Using IE (Score:2)
Re:ditch paterno, too. (Score:2)
Re:Duh! (Score:2)
http://secunia.com/search/?search=Internet+Explore r
Re:I go to Penn State (Score:2, Interesting)
Instead of reinstalling every time get the zipped distro of firefox and put it on a usb drive. It can be personalized a little:
replace Firefox\defaults\profile\bookmarks.html with your saved bookmarks
and copy the contents of Firefox\plugins to Firefox 1.0\plugins on the usb drive.
I havn't tried it with any themes or extensions yet.