Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Internet Explorer The Internet Security IT

Microsoft Rushes Internet Explorer Patch 376

drquoz writes "Last week, it was reported that a critical security flaw was found in Internet Explorer. On Tuesday, experts were advising users not to use IE until a patch could be released. On Wednesday, Microsoft released the patch. An interesting quote from the article: 'Kandek suggests that Microsoft is at a disadvantage in updating Internet Explorer because its browser doesn't have a built-in update mechanism like other browser makers. Mozilla, for instance, just released Firefox 3.05 to Firefox users through its auto-update system.'"
This discussion has been archived. No new comments can be posted.

Microsoft Rushes Internet Explorer Patch

Comments Filter:
  • Sorry...but, "huh?"

    Tools-Windows update. Or it is updated automagically if you have auto updates turned on.

    I did RTFA, but I still didn't understand that comment.

    -JJS

    • by initialE ( 758110 ) on Thursday December 18, 2008 @09:52AM (#26159777)

      Firefox updates upon the point of relaunch. There is no need to restart windows. Also it remembers the context of every session in every tab, so you can continue where you left off.

      • by buddyglass ( 925859 ) on Thursday December 18, 2008 @10:06AM (#26159923)
        True, true, and true. But that doesn't change the fact that IE only runs on Windows and 99% of Windows users have Automatic Updates turned on, usually checking weekly. So you're usually looking at a max "lag time" of seven days before an IE user gets the patch. And that assumes the worst possible case: the patch releases right after that user's computer was updated, and they use their computer (and IE) every day.
        • by markkezner ( 1209776 ) on Thursday December 18, 2008 @10:35AM (#26160295)
          While I would agree with you in theory, your ideas don't match up with what I've seen in the real world.

          Until recently I worked in a mom and pop PC repair business. About 9 out of 10 systems I worked on were out of date, typically by a few months. I don't know for sure, but my guess is that users are switching auto-update off because can't be bothered with 'nag' messages from their software.

          Granted, the machines I saw were generally dying, so it may not be a fair cross-section of home computer users. Still, the idea that 99% of home users should have new patches within a week flies in the face of what I saw every day.
          • Re: (Score:3, Insightful)

            by PJ1216 ( 1063738 ) *
            You haven't taken into account that the users you're used to running into aren't the best users. If people kept their machines updated and running properly, you wouldn't see them. Its like a cop saying everybody is a criminal because a majority of the people he sees are criminals.

            I'm not saying that the other guy is right, but when it comes down to it, neither of you really have much to go on. From my experience, if auto update is turned on to download and install automatically very rarely gets turned off
          • Re: (Score:2, Interesting)

            by RMingin ( 985478 )

            I work for a school district, cyber-schooling. Ours may not be a scientifically valid cross-section either, but I'd say 6/10 or more machines either have WUAU turned off (the more advanced kids) or they simply hit the 'go away' button and never reboot to apply updates.

            If you have pending updates, suspend/resume at night, and never manually reboot, WUAU will NOT apply further updates till the pending ones go on. I've had machines 6 months and more out of date (coming in today with XP SP2) on a regular basis.

            • Re: (Score:3, Insightful)

              by QuantumRiff ( 120817 )

              One annoying little feature of XP updates... You can choose to apply updates and shutdown, but you can't choose to apply updates and restart when you go to the shutdown menu. There are many times I'm heading to a meeting or whatever, and wouldn't mind it downloading, installing, and restarting, all ready for me when I come back. I don't want to come back and have to boot it up.

          • The same is also true for Firefox. I've encountered quite a few folks that turn off auto updates on FF because they find the updates annoying. Usually because they have so many extensions that each update warns that it will break compatibility with at least one.
          • Many users turn off their computers whenever they're not being used. Many of their auto-updates are configured to run their updates at midnight. Ergo, no updates. I have to deal with this every time I visit my grandfather, his machine is always in need of updating.
          • by ACMENEWSLLC ( 940904 ) on Thursday December 18, 2008 @12:30PM (#26161903) Homepage

            I have Firefox running on Vista, XP, 2000, 2003, Mac OS X, OpenSUSE, Mandriva, Ubuntu, and others. Firefox versions 2 and 3.

            My experience is that the Auto Update mechanism in Firefox is flawed. A number of these PC's never trigger to be updated even if they are months behind. One of my Windows 2000 servers often takes about a week before it's auto updated.

            Experience shows that it doesn't check for an update at every launch. And that sometimes it gets stuck, something gets corrupt, and not until you ask it to check will it check again.

            Granted, this is much better than most software. However the update mechanism needs work.

            Microsoft signs/encrypts and then checks the IE package signature. As much as a dog Microsoft, their update mechanism is one of the best.

        • by ianare ( 1132971 )
          True, but I have seen many setups with automatic updates turned on, but IE6 being used. You have to explicitly select IE7 to install. So even if their system is updated, they are still exposed to many more problems.
        • There is not a 7 day lag time, at least on Vista. I got a notice of new updates Tuesday, ran it yesterday and immediately after installing those, it popped up with another, new update--the IE patch. I always get a notice the day any patches or updates are released.

          I think Windows/IE's biggest problem is that they want to authenticate that the version the user has is legal. That's understandable for an anti-pirating measure, but what it ends up doing is leaving thousands of computers open to vunerabilities t

          • by Ralish ( 775196 )

            Even if Microsoft determines that your copy of Windows is pirated (false-positive issues aside), you're still able to receive security and critical updates. However, I believe only through the automatic updates mechanism, going to the Windows/Microsoft update web-site will fail during scanning due to a piracy check failure.

            Of course, the above doesn't apply to Vista and newer which dumps the dependency on updating through a website in favour of a Windows Update control panel applet.

            So, apart from the annoyi

        • ...and Firefox has a lag of one activation .... not 7 days ...?

        • by mcgrew ( 92797 ) *

          You shouldn't have to update the OS to update the browser. When I first installed XP, I had automatic updates turned on, but the very first one overwrote my perfectly good network driver with one that didn't work. I had a hell of a time figuring out what was wrong; the cable modem was sitting on the floor that morning so I thought the cat had knocked it off and broken it.

          Anyone who has an experience like this either shuts off installing updates automatically, or is brain dead. I question the "99%" figure I

        • by L0rdJedi ( 65690 ) on Thursday December 18, 2008 @11:21AM (#26160975)

          Weekly? The default is to check every day at 3am. If it's turned on and left at the default (like most people do with FireFox), they'll be notified this morning and able to install it right away.

    • The automatic update system in Windows is far from perfect, and doesn't allow users the granularity of saying "yes, update my browser but no, leave the rest of my system alone."

      Also, telling it you want to be notified of available updates (similar to Firefox's behaviour) is nowhere near as convenient as the way Firefox handles simply installing its own update and then restarting with your windows and tabs reopened to where you were last.

      • by Culture20 ( 968837 ) on Thursday December 18, 2008 @09:59AM (#26159869)

        The automatic update system in Windows is far from perfect, and doesn't allow users the granularity of saying "yes, update my browser but no, leave the rest of my system alone."

        I'm more of a Linux man, but I know this is wrong. If you set auto updates to download and notify for installation, you can choose which updates to apply.

        • by prefect42 ( 141309 ) on Thursday December 18, 2008 @10:14AM (#26160037)

          With Vista they've made it doubly annoying, as Windows Defender gets updates *all* the time. So if you've got it set to notify, you get a whole lot of nagging. If only you could pre-approve Windows Defender updates...

          • I have never gotten notifications of Defender updates, they just install around 6:30 am the day after they are released. Don't know what I would have set to cause that, though.
      • by rlp ( 11898 ) on Thursday December 18, 2008 @10:08AM (#26159951)

        doesn't allow users the granularity of saying "yes, update my browser but no, leave the rest of my system alone

        Indeed, you can't have it automatically update a critical browser flaw, but say 'no' to the 1673rd revision of "Windows Genuine Advantage".

        • by mshannon78660 ( 1030880 ) on Thursday December 18, 2008 @11:12AM (#26160825)
          Actually, you can - I've done exactly this on my home PC, which was installed from a corporate license (had an MSDN subscription at the time). You need to go through the process manually once - you select everything other than WGA, and when it asks if you really want to ignore that update, you check the box that says something like 'Never ask me about this update again', and click OK. Now, I still get all the critical updates installed automatically, but never have WGA installed on my PC. It's been like that for several years now.
          • Re: (Score:3, Informative)

            I did that for years but at one point (I think before SP2) it refused to download any more patches until I updated WGA. I'm pretty sure MS Update checks to make sure your WGA is recent. Granted I have a consumer license and not a corporate one. The vast majority of home users have my type of license and not yours.
      • The automatic update system in Windows is far from perfect...

        I'll agree with you there. A lot of times it forces a reboot when really all it needs to do is restart a program or service.

        [It] doesn't allow users the granularity of saying "yes, update my browser but no, leave the rest of my system alone."

        Mine does. Go to Control Panel > Automatic Updates and pick "Download updates for me, but let me choose when to install them."

      • Well, Firefox's update system is hardly perfect either. If you run with the default settings it suddenly, without notice, declares that it's installing an update (why? what's changed?). And it's likely to disable a raft of plugins in the process. Of course this behavior can be changed, but so can the automatic settings for Windows Update.

        FF's approach is also not optimal if you're administering more than a handful of machines.

      • Yes it does. Expert install lets you choose which updates you want.
      • by Shados ( 741919 )

        Err? When there are updates, I can cherry pick which ones I want from a list with checkboxes, and click "Install", and do so ONLY for the ones I want. Some non-security related updates are irrelevent to me, so I left them to rot for months... I can even hide them so it never asks me about them ever again.

        Are you talking about something else, or..?

    • Re: (Score:3, Insightful)

      by EricX2 ( 670266 )
      But does it check when you launch IE and install updates if they are available?
    • Re: (Score:2, Funny)

      by Anonymous Coward

      Sorry...but, "huh?"

      Tools-Windows update. Or it is updated automagically if you have auto updates turned on.

      I did RTFA, but I still didn't understand that comment.

      Clearly the article doesn't believe the microsoft line about IE being an integral, inseparable part of windows.

      • Re: (Score:2, Informative)

        by RMingin ( 985478 )

        Probably because it wasn't, and it wasn't for a VERY long time. It's only when the EU got serious about pushing for an IE-less Windows that MS suddenly started integrating the crap out of IE/Windows.

        As recently as Windows 2000, you could have a fully functional machine with IE fully removed. MS would swear up and down that it wasn't possible, but folks all over did it every day.

        With XP and onwards, MS used IE instead of the older Explorer cousin to render local folders and files. This was a gargantuan mista

  • Interesting... (Score:5, Insightful)

    by nhaines ( 622289 ) <nhaines.ubuntu@com> on Thursday December 18, 2008 @09:38AM (#26159567) Homepage

    Internet Explorer may not have an auto-update system, but Microsoft Windows has an update system rivaling that of Ubuntu and OS X in automaticness, if not scale.

    Since Windows encourages users to allow automatic updates installed at 3am every morning and also by default installs any pending critical updates at system power down, it doesn't seem like any supported version of Internet Explorer should remain unpatched for too long.

    • Re: (Score:2, Interesting)

      by Yvanhoe ( 564877 )
      I even find it awkward that no popular linux distribution checks and proposes security updates at bootup.
      • by tepples ( 727027 ) <tepples.gmail@com> on Thursday December 18, 2008 @09:46AM (#26159689) Homepage Journal

        I even find it awkward that no popular linux distribution checks and proposes security updates at bootup.

        I have an ASUS laptop that runs Ubuntu 8.04. I turned it on, turned on the Wi-Fi radio, and started Firefox to look up something about reenactment costuming. After a few minutes, I noticed the update icon in the tray. One of the updates was Mozilla Firefox 3.05. I clicked download and apply, and it was done. So yes, Ubuntu automatically "checks and proposes security updates".

        • Also, I'm pretty sure I just selected an option to automatically install security updates in my Ubuntu 8.10 build ... I could have been dreaming, but I'm pretty sure I was wide awake.

        • I bet you have two blue arrows that point to each other in your tray. If Ubuntu checked and applied security updates at startup, you wouldn't need to reboot after applying them. I think that's what he's saying.

      • I even find it awkward that no popular linux distribution checks and proposes security updates at bootup.

        Can you tell us what distro does not check for updates?

    • Re:Interesting... (Score:4, Informative)

      by Zonk (troll) ( 1026140 ) on Thursday December 18, 2008 @09:59AM (#26159871)

      Internet Explorer may not have an auto-update system, but Microsoft Windows has an update system rivaling that of Ubuntu and OS X in automaticness, if not scale.

      Since Windows encourages users to allow automatic updates installed at 3am every morning and also by default installs any pending critical updates at system power down, it doesn't seem like any supported version of Internet Explorer should remain unpatched for too long.

      Ubuntu and Mint, at least, check daily. In Ubuntu when there are security updates you see a red arrow in the notification area, when non-security updates are available you see a orange sun(?). Also, if you go to "System"->"Software Sources" and then the "Updates" tab you can set it to apply security updates automatically (this really should be default, IMHO).

      I still think Ubuntu's update system rivals Windows and OS X as it not only updates the base OS and OS vendor applications, it updates everything on the system.

    • Re:Interesting... (Score:5, Insightful)

      by Ilgaz ( 86384 ) on Thursday December 18, 2008 @12:08PM (#26161613) Homepage

      I went to microsoft.com support pages on purpose, with unpatched IE.

      They spam Silverlight 2.x install on the pages instead of "update your Internet Explorer NOW!" in same fashion. I call it "spam", total spam I tell you. It is like whole page darkens before you can click anything and middle of page, there is "Install Silverlight Now!". Based on the hugeness of the security bug, I would cheer if they showed that IE warning in ALL MS sites including MSN. I saw MSN too, it has 1 liner "Download urgent Internet Explorer update". Of course it was blocked by "See your specific country page now!", another pop-in trick.

      What kind of purpose will Silverlight 2 serve at Support pages to "enhance" my experience besides not being Adobe Flash?

      Oh BTW, guess what XP SP3 installs. Flash Player 6. Yes, SIX. On the other hand, Apple updates all their customers Flash to secured 9.x version.

      They really believed that buying Yahoo for 46 billion would fix that logical problem?

  • by El Cabri ( 13930 ) on Thursday December 18, 2008 @09:38AM (#26159587) Journal

    I found this this morning in my Windows Updater log :

    "
    Security Update for Internet Explorer 7 in Windows Vista (KB960714)

    Installation date: 12/18/2008 3:01 AM
    "

  • IE autoupdating.. (Score:4, Insightful)

    by skgrey ( 1412883 ) on Thursday December 18, 2008 @09:39AM (#26159595)
    If Microsoft had the same reputation that Mozilla did for their updates not screwing the pooch then maybe I would consider using that kind of auto-update feature.

    Then again, I only use Firefox, and would never consider using IE. At one point do even common household users realize that IE is not the way to go?
    • Re:IE autoupdating.. (Score:5, Interesting)

      by djmurdoch ( 306849 ) on Thursday December 18, 2008 @10:09AM (#26159973)

      Then again, I only use Firefox, and would never consider using IE.

      It's harder to avoid than you seem to think. If you use Windows help to view .chm files, you're using IE. Usually they stay local, but many help files do include
      links to web pages, and then you're out in the real world.

      • Re: (Score:2, Funny)

        It's harder to avoid than you seem to think. If you use Windows help to view .chm files, you're using IE. Usually they stay local, but many help files do include links to web pages, and then you're out in the real world.

        And for Slashdot readers... that's a no no..

  • Firefox updated? (Score:5, Insightful)

    by Henry V .009 ( 518000 ) on Thursday December 18, 2008 @09:40AM (#26159599) Journal
    No -- Firefox is at the disadvantage. If you're a single user running as administrator, its auto-update is great. However, the users (all running limited accounts) on our Windows/Samba network will have to wait until I install the new update manually because there is no built in mechanism for administrators to push out updates.

    And should I use my cobbled together scripts to push out a security update for Firefox on the last day of finals when it might break everything, or should I wait until Monday?

    On the other hand, the WSUS server that I set up worked exactly like it was supposed to last night.
    • Yes, but (Score:3, Interesting)

      Most people aren't in your situation or that of your users. Most people are surfing the web on their personal computers, and so automatic updates will work just peachy for them.

    • Re:Firefox updated? (Score:5, Interesting)

      by denis-The-menace ( 471988 ) on Thursday December 18, 2008 @09:57AM (#26159847)

      You are right.
      The strange thing is that some FF updates do get installed with XP's "Limited User" accounts but some just fail.
      No rhyme, no reason.
      For those that failed I had to log on with an Admin account and let the FF update install.

      FF needs a updater service that runs in the System context so that all FF updates can get installed without the user being logged on as an administrator.

      • by Anonymous Coward on Thursday December 18, 2008 @10:09AM (#26159967)

        FF needs a updater service that runs in the System context so that all FF updates can get installed without the user being logged on as an administrator.

        No, I don't want another mysterious service that runs in the background doing whatever it feels like without explicit approval.

        Firefox for windows needs to start deploying the program as a regular .msi file (like most windows applications) so that all the existing application deployment tools will work. That will go a long way to boosting firefox among businesses & large organizations.

      • Dear God, No (Score:4, Insightful)

        by TheNinjaroach ( 878876 ) on Thursday December 18, 2008 @10:18AM (#26160093)

        FF needs a updater service that runs in the System context so that all FF updates can get installed without the user being logged on as an administrator.

        I would never enable that feature on my PCs. The last thing I want Firefox to do is join the ranks of Flash, Java, Adobe Reader and iTunes with nagging auto-update services that always run in the background. Often the updates aren't even critical, I think many of those 'features' are pushed by marketing departments who want to plaster your desktop with as many of their logos as possible.

        • ...or you could change to a decent Linux distro that autoupdates everything... and the autoupdater has the privilege and not the program ... or Microsoft could actually open up the Windows update system and allow other programs to use it rather than having several different ad-hoc systems ?

        • MS ought to create a generic update service that would allow programs to register an URL to check for updates and an update program to launch when one is available. I don't see any security implications that don't apply with every program having its own update service.

    • What is that thing, another overpriced piece of proprietary bloatware?
      On RPM based Linux distribs, it's trivial to create an RPM package of any bunch of file you have. A simple .spec file need not be more than a dozen lines to achieve this. Rpmbuild it, and voila, you've got a new package that you can push any number of ways. Just create a yum repository, again, quite a basic thing to do, and on the next update request it will be installed.
      So what's preventing you from doing that with FF and WSUS? FF is alm

  • ...because its browser doesn't have a built-in update mechanism like other browser makers

    At first I thought, "this isn't right", but then I realized that IE updates along with the general Windows update, and not by itself. Perhaps this is because Microsoft so tightly binds IE to the operating system that it doesn't think of it as a separate product?

    • Re:IE updates (Score:5, Insightful)

      by BotnetZombie ( 1174935 ) on Thursday December 18, 2008 @09:45AM (#26159677)
      Tightly bound indeed. I've been postponing the inevitable reboot all day long (GMT here). It's ridiculous to need a reboot just for a browser update.
    • by Civil_Disobedient ( 261825 ) on Thursday December 18, 2008 @09:46AM (#26159699)

      Perhaps this is because Microsoft so tightly binds IE to the operating system

      Not perhaps.

      I believe the engineering term is "reap what you sow, bitches."

      • No joke. I just love how some key menus that are LOCAL use IE. For example, on Windows XP the User Accounts option in Control Panel. The window that opens is not Windows Explorer but Internet Explorer. Interestingly, if your security settings are too tight you can't use that menu at all. You'd have to manage the users manually.
    • by Shados ( 741919 )

      Pretty much the totality (with one or two exceptions) of Microsoft's products update via Windows update, From Internet Explorer, going to SQL Server, passing by MS Office. Even SQL Server's Book-Online and some built in games updates via Windows Update

  • Windows Update? (Score:3, Interesting)

    by Farmer Pete ( 1350093 ) on Thursday December 18, 2008 @09:43AM (#26159657)
    I wonder how many exploits will be found in IE before they are all gone. I mean, logically, there has to be some point in the future when IE7 is totally exploit free. To bad that the cycle of software replacements wont let that happen. Given enough time, IE7 and WinXP could be some of the toughest software in existence.
    • by mcgrew ( 92797 ) *

      I wonder how many exploits will be found in IE before they are all gone. I mean, logically, there has to be some point in the future when IE7 is totally exploit free

      First, the marketing department would never let this happen. Second, if they stayed with "patch only" while the other browsers came up with new stuff nobody would use it; see what happened when they had over 90% of the market and became complacent? Of course, they weren't patching it at all then. Third, code changes often introduce bugs of their

  • Reality is, most IE users have no idea there is a flaw and no idea there is a patch. So the lack of in browswer auto download basically means that nothing has been achieved for "most" of their user base.

    One thing I do notice about the less savvy users is that they do mostly trust windows update.
    • Trust is an understatement.

    • Re: (Score:3, Insightful)

      by Fred_A ( 10934 )

      One thing I do notice about the less savvy users is that they do mostly trust windows update.

      On the other hand, what else could they trust ?
      They have no idea how their computer works, certainly aren't interested in figuring it out, so they trust their vendor. Makes sense.

      It's probably safer than they trusting random sources on the Web where they don't have the know how to separate the wheat from the chaff.

      Ideally they should have an administrator taking care of this for them. But in the real world we all know this won't happen. Especially with home users.

  • by fuzzyfuzzyfungus ( 1223518 ) on Thursday December 18, 2008 @09:47AM (#26159705) Journal
    Per application autoupdates are a horrendous pain. Each one has its own, completely idiosyncratic configuration mechanism, its own schedule, and its own behavior. A lot of them will run(but fail in various annoying ways) under limited user accounts, and they are utterly useless in an environment where firewalls or similar block application downloads on client machines.

    I can understand why companies use them, since the alternative typically involves things sitting unpatched for ever and ever; but the whole thing is a mess. Hurray for package management.
  • Internet Explorer is at a disadvantage that is requires a system reboot in order to apply updates.

  • Yeah, MS has no way to update software on their operating sytstem.. oh wait... the amonia just wore off. They do. Somewhat like their regular security updates they release for IE.

    If only they had a seperate update for every program.. with all that hassle.. maybe they could not be disadvantaged?

  • Huh? (Score:5, Insightful)

    by I.M.O.G. ( 811163 ) <spamisyummy@gmail.com> on Thursday December 18, 2008 @09:52AM (#26159781) Homepage

    IE is at a disadvantage because it doesn't have a built in update mechanism? Seriously?

    IE updates are managed thru a single interface, windows update, and windows update is actually one small thing windows gets mostly right. I don't want every god awful program under the sun phoning home ON ITS OWN to god knows where and updating itself without my knowledge.

    However I do want a convenient method to make sure I'm getting updates I may need from a trusted source. Windows update is better than programs phoning home on their own. Short of having an update repository for 3rd party apps like Linux distros do things, thats about the best you can hope for...

    That is, unless you like the google software updater, apple software updater, etc, running all the time soaking up resources and generally being non-value added.

    • Does MS offer a way for Google, Apple, etc. to register that they've got an update available, so they could use the standard update mechanism, instead of writing their own?

      Not that Apple would choose to use it: they like to mix ads in with their updates, but I can see some other projects taking advantage of this.

    • by Tridus ( 79566 )

      Oh, but it's Apple/Google/Whatever, so it must be good! I mean who needs one updater talking to one central location for updates when you can have 50 updaters talking to 50 locations for updates instead?

      Nevermind that WU installed this patch on my machine last night, because that's not the point.

    • True, but unfortunately Windows Update tends to require a reboot. The advice MS gives, leave your Windows box connected 24/7 and update at 3am, is about the worst advice I've ever heard. You'll get a lot more attacks than updates in any given day. Especially when MS is basically announcing to all the attackers what the window of vulnerability is.

      So yes, technically the Windows Update feature is competently implemented, but the policies Microsoft recommends regarding its use are utterly moronic.

  • Reboot? Why? (Score:4, Interesting)

    by clintre ( 1078849 ) on Thursday December 18, 2008 @10:27AM (#26160191)
    The bad thing about IE not having the built in updater is that this patch required a freaking reboot for a browser patch!!

    That is just stupid.

    The great thing about this fiasco is that I was able to convince several people who had been un-willing to move to Firefox or Opera to now do so.

    Thanks Microsoft!
    • The great thing about this fiasco is that I was able to convince several people who had been un-willing to move to Firefox or Opera to now do so.

      Mozilla has issued eight patches for its Firefox Web browser, three of which fix problems classified as critical. [pcworld.com]

      Man, you really showed them.

      • by phayes ( 202222 ) on Thursday December 18, 2008 @11:41AM (#26161281) Homepage

        Your comment shows ignorance.

        When FF needs to install critical patches it restarts itself & conserves as much context as possible.

        When windows needs to install critical patches it reboots the system & loses all context. Even if you delay the reboot to finish critical tasks the reminder that you need to reboot pops up periodically with reboot preselected. If you were performing an unrelated task & happen to hit enter at the wrong time the system reboots without saving your work possibly corrupting it.

        I've seen it happen a few times & people do switch browsers after being burnt or seeing it happen to colleagues, but I suppose you'll just stick your fingers in your ears, close your eyes & mumble your prayers to the Redmond God to spare you...

    • IE itself doesn't know it is out of date. Some other system is required to do that. This has been a perpetual problem for awhile now where a lot of software product out there depends on a "third party" to check for version status. If the "third party" malfunctions or is misconfiguration, the software doesn't update. Even if the software can't update it would be nice to notify the user there is a critical update to apply manually.

      Firefox isn't perfect but one thing they do right is letting the user know

  • by Skapare ( 16644 ) on Thursday December 18, 2008 @10:48AM (#26160483) Homepage

    ... if it is running in a restricted userid?

    • by Inda ( 580031 )
      On Vista it fails.

      Had my daughter moaning on the last update. Firefox told her to update, or it did it automatically, and when it restarted Vista asked for my admin password. She was without Firefox until I came home from work. I got a bollocking. She could have used IE if she knew where to look. grrrr.

Research is to see what everybody else has seen, and think what nobody else has thought.

Working...