How Secure Is Your Browser?...results from over 100,000 users...

[AplusWebMaster]

FYI...
http://www.net4nowt.com/isp_news/news_article.asp?News_ID=1082
"Results of a survey conducted by the Belgian IT security company, ScanIT, indicates that many of the worlds computers are "sitting targets" for hackers, despite the use of virus protection software and firewalls...The results collected from over 100,000 users of the companys free online Browser Security Checker show almost half (45 per cent) of users to be at "high risk" of a potential hacker attack, thirty-six per cent were shown to be at "medium risk," and a further one per cent at "low risk"...Canadian and American Internet users were shown to be at least risk of an attack , with 37 and 36 per cent of users found to be at high risk, (respectively), and forty per cent of users in both countries at "medium risk."..."

NOTE: This takes some time (27 items); to take "the Test", go here: http://www.scanit.be/bcheck

[peakaboo]

Sounds like a good test of browser security.

Unfortunately in order to take the test it requires me to enable Javascript.

Since I normally run with Javascript disabled, this test is a non starter for me.

guess I'll never know how well or poorly I may have done :o

[Mr.Blaze]

yup me to since i got high security runing i cant seem to take the test either in order for me to take test i have to lower all my security settings darn the luck

[Tassie_Devils]

Hehehehe!

My Java is pretty 8)

and................drum roll...............the results are................

[JimIT]

-{ Quote: " quoting: Tassie_Devils link=board=22;threadid=11253;start=0#msg73573 date=1058283112]

Hehehehe!

My Java is pretty 8)
" }-

Mine is too! ;)

And even though I had to bypass Proxo to even load the thing...

[Yinda]

Mine is too !

Peakaboo said :
-{ Quote: "Since I normally run with Javascript disabled, this test is a non starter for me." }-

I would like to disable Javascript in e-mails. Unfortunately, many web pages rely on Javascript to work. So can we live without Javascript ? What happens when it is disabled ?

Yinda

[peakaboo]

-{ Quote: " quoting: Yinda link=board=22;threadid=11253;start=0#msg73870 date=1058390418]
Mine is too !

Peakaboo said :
-{ Quote: "Since I normally run with Javascript disabled, this test is a non starter for me." }-

I would like to disable Javascript in e-mails. Unfortunately, many web pages rely on Javascript to work. So can we live without Javascript ? What happens when it is disabled ?

Yinda
" }-

I have been using this aproach for 6-8 months and have had no problems at all.

I disable just about everything in the Internet zone, and simply add trusted sites to my trusted zone to allow java script active x etc.

easy to add just use copy and paste, double click on the Internet icon above sys tray, select trusted sites, click on sites, cntrl + v to paste new site to trusted zone.

Easier way is to add security buttons to your browser, but I can't find a link right now 4u.

I also use Proxo (proxomitron) to further limit what my browser allows (allow certain java aplets and kill the rest, referer, kill selected class ids, tracking links, web bugs, iframes etc)

[peakaboo]

-{ Quote: "
I disable just about everything in the Internet zone, and simply add trusted sites to my trusted zone to allow java script active x etc.

easy to add, just use copy and paste, double click on the Internet icon above sys tray, select trusted sites, click on sites, cntrl + v to paste new site to trusted zone.

Or

Easier way is to add security buttons to your browser, found link below.

" }-

adding Restriction commands in the tools menu for IE5.x (http://www.microsoft.com/windows/ie/previous/webaccess/pwrtwks.asp)

alternative:

from Jason Levine (http://www.jasons-toolbox.com/ScriptRepository/default.asp?id=11)

[Yinda]

Thanks Peakaboo,

Until now, I have done nothing with the Internet zone and the trusted sites. I did not realize that they may have different security settings :-[ ! I learn many things every day, but still have so many to learn.

I'll adjust settings according to your recommendation et see which sites to put in the trusted zone. I don't know much about proxy.

Thanks again.

[peakaboo]

Yinda,

My pleasure.

here is another link to Microsoft how to info on security zones:

http://www.microsoft.com/windows/ie/using/howto/security/setup.asp

link where hpguru shows his security settings:

http://asp.flaaten.dk/proxo/topic.asp?TOPIC_ID=851

As for proxomitron, a little learning curve but very much worth it.

The Author of the program Scott Lemmon has decided to move on to other projects, but there appears to be some interest by others to open source the code and continue enhance/development.

version 4.5 is the latest version, you can Cop a copy here:

http://www.computercops.biz/downloads-cats-19-10-10.html

and get additional help from the help file in the program as well as computer cops and other proxo forums

good luck 8)

[Yinda]

Hi Peakaboo,

The Microsoft's link on the security zones is very instructive. I'll need days to learn it ;D

I installed Trust Setter from jasons-toolbox but am not sure where it has gone ! Well, I guess it is not so essential.

Thanks a lot.

Yinda

[AplusWebMaster]

8) OK, folks...but the test is not the "end all" for your security. There are other browser tests that are available (some posted below), but keep in mind: new holes are found every day, and nothing is "100% secure". So although these tests are good, it doesn't mean there is "no way" for the vultures to get in...

A few other browser test sites:
- http://www.gemal.dk/browserspy/
- https://testzone.secunia.com/browser_checker/
- http://browsercheck.qualys.com/
- http://www.cyscape.com/showbrow.asp?all=1&bhcp=1

[Yinda]

Hi,

Actually, I don't think OE has passed all the tests.

1. Attachment : "If you receive this file it means that you do not have adequate anti-virus protection". Actually I received them as eicar.com.safe and *.vbs.safe. Probably they have been renamed by Outpost. When I tried to open the "safe" attachment, a warning (from Outpost ?) was displayed, but I confirmed. Then the operation was rejected by the anti-virus.

So I "received" the files but was unable to open them. Was the test successful ? I think so.

2. I received the eicar.com [1/5] mail, with the eicar.com attachment. So "the fragmented message has circumvented your server level protection as well as the security settings of your email client". Is there something to do with OE to prevent that ?

Thanks

Yinda

[Tinribs]

I failed instantly as my browser wouldn't allow popups ;) suits me


edit : typo

[solarpowered candle]

:) same here. (mozilla 1.4 ) however curiosity got the better and I placed that site iin the allowed sites for pop ups , just to see. It came thru with all ok. Interesting statistics shows that most safe browsers have been those who use mozilla, with opera next . Iv also gone back to usiong "spyblocker" which i havent used for ages . the new 6.3 is very nice