diginsight
June 13th, 2005, 03:06 AM
Source: WinInfo Daily UPDATE--Short Takes--June 10, 2005
Several reports suggested this week that Microsoft Internet Explorer (IE) 7.0, which will ship this year for XP SP2, will include a feature called low rights that lets the browser operate in a safer, lower-privileges mode. That news would be wonderful, but it's not true. "While most IE 7.0 security features will be available in IE 7.0 for Windows XP SP2, low-rights IE will be available only in Longhorn because it's based on the new Longhorn security features that make running without Administrator privileges an easy option for users (User Account Protection)," Rob Franco, lead program manager for IE Security, wrote in the IE blog this week in an effort to clear up the confusion. "The primary goal of low-rights IE is to restrict the impact of a security vulnerability while maintaining compatibility. Low-rights IE doesn't 'fix' vulnerabilities, but it can limit the damage a vulnerability can do."
Several reports suggested this week that Microsoft Internet Explorer (IE) 7.0, which will ship this year for XP SP2, will include a feature called low rights that lets the browser operate in a safer, lower-privileges mode. That news would be wonderful, but it's not true. "While most IE 7.0 security features will be available in IE 7.0 for Windows XP SP2, low-rights IE will be available only in Longhorn because it's based on the new Longhorn security features that make running without Administrator privileges an easy option for users (User Account Protection)," Rob Franco, lead program manager for IE Security, wrote in the IE blog this week in an effort to clear up the confusion. "The primary goal of low-rights IE is to restrict the impact of a security vulnerability while maintaining compatibility. Low-rights IE doesn't 'fix' vulnerabilities, but it can limit the damage a vulnerability can do."