Sunday, January 7, 2007

IE6 was unsecured for 284 days in 2006

Slashdot posted a link to a washingtonpost article compiling the number of days IE6 had open exploit code with no fixes from Microsoft. The result is more than 9 months (284 days) of the year, the IE6 browser had known unpatched security flaws. There was also another 98 days without fixes to IE flaws that criminals were using to gain personal and financial data.

Could a customer sue Microsoft over his losses because of the lack of support for the browser? While Microsoft enforces Internet Explorer as the default browser in all it's operating systems, this causes the majority of people to go with the crowd and use what's already there. And with the results given from the article, I think Microsoft should be held legally accountable for the loss of millions of user data, and in the future, they have a choice of either removing IE from their system, or showing one of those scary warning signs they have to the user saying "We do not guarantee the confidentiality of the information you send and receive over the internet if you use our Internet Explorer" Just like what they did when they lost the lawsuit against Sun for licensing their own modified JRE.

No comments: