Temporary solution for IE user til this FFXI hacking crisis is solved

[Vandoura]

Since this keylogging and hacking came from Javascript and with ActiveX exploit. If you ever been infected with it, go to Dayner Topic for removal instruction.

This is a temporary solution to help you feel safe visiting FFXI related site that was once suppose to be "safe"


Step 1) Uninstall RealPlayer as of today, Realplayer 11 beta and 10.5 are at must at risk http://www.symantec.com/enterprise/...g/2007/10/realplayer_exploit_on_the_loos.html

Step 2) Have Antivirus installed in your computer. There is a lot of free software out there you can use.

Step 2a) Free Antivirus have limited option you can do to protect yourself, is strongly recommend pay for 1 year subcription and a full verison is better.

Step 2b) Internet Security Software is best if you can afford it, They have firewall to block off any illegal action in your computer and monitor almost anything you're doing inside and outside of internet.

Step 3) SuperAntispyware from http://www.superantispyware.com/superantispywarefreevspro.html, They have freeware version

Step 3a) Ad-aware is also nice http://www.lavasoft.com/products/ad_aware_plus02.php

Step 4) Go to Tool Menu -> Internet Option -> Go on Security Tab -> Go to Internet (one with Earth Globe)

Step 4a) Click "Custom Level"

Step 4b) Look for "ActiveX Controls and Plug-ins"

Disable The following:
-Allow previously unusued ActiveX controls to run without prompt
-Allow scriptlets
-Automatic prompting For ActiveX controls
-Binary and script behaviors
-Display video and animation on webpage that does not use external media player
-Download signed ActiveX control
-Download unsigned ActiveX controls
-Initialize and script ActiveX controls not marked as safe for scripting
-Script ActiveX controls marked safe for scripting

Step 5) Go to Scripting


Disable the following:
-Scripting of Java Applets


Step 6) Go to Programs tab from Internet Options and look for "Manage Add-ons" and click it.

Disable the following:
Java Plug-in
SSVHelper Class (if you have them)
Sun Java Console (if you have them)

Optional Step 7) Go to your Internet Option again and this time go to Privacy tab

Put on the following setting:
Have setting set one High

Optional Step 8 ) If you don't like my way, you can use this way "How to surf more safely with Internet Explorer 7" from http://www.helpwithwindows.com/techfiles/ie7-surf-safe.html


Note: Those setting will display website improperly and may function improplerly also. Use this option at your own risk. This setting is basicly block of all Java Script connection and some of the activeX control.

 

[Bajaratt]

A better solution: use firefox. Get adblock plus and noscript. You're set.

 

[Vandoura]

A better solution: use firefox. Get adblock plus and noscript. You're set.

I know, but some people have their own liking. Is like people like PS3 and dislike XBOX360, and Some like XBOX360 and dislike PS3

I'm just helping people that don't like firefox and like to use IE instead and feel secured at the same time while using it

 

[Skaw]

A better solution: use firefox. Get adblock plus and noscript. You're set.

An even better solution is to learn what the fuck you're doing.

 

[Lanien]

I know, but some people have their own liking. Is like people like PS3 and dislike XBOX360, and Some like XBOX360 and dislike PS3

I'm just helping people that don't like firefox and like to use IE instead and feel secured at the same time while using it

Just cause you like something, doesn't make it the best option.

OH SNAP!! j/k lol

Anyways, yeah ... Firefox is fetch.

 

[Blabj]

An even better solution is to learn what the fuck you're doing.

I'd say downloading Firefox is an easier process than learning ESP so you can tell when a site you've known to be safe gets hacked and riddled with malicious code you'd otherwise never have known about.

Yep.

 

[Skaw]

I've said it before. I use IE. I visit the same sites as everyone else. I was on Somepage just a few days ago as well, and I'm clean.

Get the fuck off the internet if you don't know how to take care of your shit.

 

[Blabj]

Seriously?

You do realise you're benefiting nobody if you promote this attitude, don't you? For a start, the idiot noob is going to see you're cleverly worded (read: offensive) posts on why using IE merits 1337 points, and think to himself "Shit yeah, I'm going to carry on using IE because I'm on some sort of renegade, just like Skaw is!" then he's going to get hacked, because you told him IE is cool.

What you're doing is essentially boycotting the obvious answer because you want some kudos you're not going to get because you seem to think you're some well versed internet user.

 

[Davion]

Just cause you like something, doesn't make it the best option.

OH SNAP!! j/k lol

Anyways, yeah ... Firefox is fetch.

Lanien stop making "fetch" come back. That was so lolMeanGirls.


j/k I found Mean Girls to be amusing and funny

 

[Xephon]

I've said it before. I use IE. I visit the same sites as everyone else. I was on Somepage just a few days ago as well, and I'm clean.

Get the fuck off the internet if you don't know how to take care of your shit.

Ive said it before. I smoke. I smoke the same cigarettes as everyone else. I was smoking just a few minutes ago, and ive not got cancer.

Surely nobody else will?

 

[Skaw]

Seriously?

You do realise you're benefiting nobody if you promote this attitude, don't you? For a start, the idiot noob is going to see you're cleverly worded (read: offensive) posts on why using IE merits 1337 points, and think to himself "Shit yeah, I'm going to carry on using IE because I'm on some sort of renegade, just like Skaw is!" then he's going to get hacked, because you told him IE is cool.

What you're doing is essentially boycotting the obvious answer because you want some kudos you're not going to get because you seem to think you're some well versed internet user.

Or frankly, I just get tired of people promoting fad browsers because they're too lazy to actually learn how to protect themselves, or deal out real answers.

 

[Trippyhippy]

I don't use firefox for the same reason I don't use IE7. I don't liked tabbed browsing and I can't find anything wrong with IE6. And yes, I know you can get X plug-in to make it look like IE6, but that's more work than using IE6.

Firefox does have it's uses. Like with Vista for example. IE7 runs like shit, and you can't use IE6 with Vista. If I had Vista, I'd switch back to xp. If I couldn't, then I would use firefox. But security doesn't really enter into it for me. I have no security issues with IE.

The biggest security holes in IE come from ActiveX, which no other browsers support (to my knowledge). I don't use ActiveX. Problem solved. It isn't broke, so I'm not going to try to fix it.

 

[Nugotugo]

I know, but some people have their own liking. Is like people like PS3 and dislike XBOX360, and Some like XBOX360 and dislike PS3

I'm just helping people that don't like firefox and like to use IE instead and feel secured at the same time while using it

If Microsoft wanted IE secure they would actually patch the issues.... Its not like these exploits are new news.

Not to mention all of your "Suggestions" are basic knowledge on web browsing. Not to mention, Its not like Internet Options is a overly complicated settings page to figure out...

 

[Lanien]

Lanien stop making "fetch" come back. That was so lolMeanGirls.


j/k I found Mean Girls to be amusing and funny

But I want fetch to happen ; ;

 

[Tristam Green]

Step 1) Uninstall RealPlayer as of today, Realplayer 11 beta and 10.5 are at must at risk http://www.symantec.com/enterprise/...g/2007/10/realplayer_exploit_on_the_loos.html

For the userbase out there who actually uses RealPlayer, the program is only at risk if you have not patched it. Please don't instruct anyone to uninstall *anything* from their machines unless you read the entire goddamn article.

Update - October 22, 2007: RealNetworks has released a patch that addresses this vulnerability.

Step 2) Have Antivirus installed in your computer. There is a lot of free software out there you can use.

I have no problem with this statement.

Step 2a) Free Antivirus have limited option you can do to protect yourself, is strongly recommend pay for 1 year subcription and a full verison is better.

Step 2b) Internet Security Software is best if you can afford it, They have firewall to block off any illegal action in your computer and monitor almost anything you're doing inside and outside of internet.

I do have a large problem with this though. Free versions of Anti-virus software and FOSS (that's Free/Open Source Software, kiddies) security suites are generally JUST AS GOOD AS THE COMMERCIAL VARIANTS. Just because it doesn't wield the Symantec/McAfee/TrendMicro shield, doesn't mean it's shit.

Also, Microsoft Windows XP Service Pack 2 and Vista come with a nifty feature called the Windows Firewall. At the very least, try the stuff that comes with your OS before delegating it to third-party software.

Step 3) SuperAntispyware from http://www.superantispyware.com/superantispywarefreevspro.html, They have freeware version

Step 3a) Ad-aware is also nice http://www.lavasoft.com/products/ad_aware_plus02.php

You just harped on how commercial software is better than free variations, yet you laud these two? What about Spybot S&D? ZoneAlarm? Windows Defender? I've never even heard of SuperAntispyware, and it sounds like something I'd want to avoid just because of its longass name.

Step 4) Go to Tool Menu -> Internet Option -> Go on Security Tab -> Go to Internet (one with Earth Globe)

Step 4a) Click "Custom Level"

Step 4b) Look for "ActiveX Controls and Plug-ins"

Disable The following:
-Allow previously unusued ActiveX controls to run without prompt
-Allow scriptlets
-Automatic prompting For ActiveX controls
-Binary and script behaviors
-Display video and animation on webpage that does not use external media player
-Download signed ActiveX control
-Download unsigned ActiveX controls
-Initialize and script ActiveX controls not marked as safe for scripting
-Script ActiveX controls marked safe for scripting

Step 5) Go to Scripting


Disable the following:
-Scripting of Java Applets


Step 6) Go to Programs tab from Internet Options and look for "Manage Add-ons" and click it.

Disable the following:
Java Plug-in
SSVHelper Class (if you have them)
Sun Java Console (if you have them)

Optional Step 7) Go to your Internet Option again and this time go to Privacy tab

Put on the following setting:
Have setting set one High

Optional Step 8 ) If you don't like my way, you can use this way "How to surf more safely with Internet Explorer 7" from http://www.helpwithwindows.com/techfiles/ie7-surf-safe.html


Note: Those setting will display website improperly and may function improplerly also. Use this option at your own risk. This setting is basicly block of all Java Script connection and some of the activeX control.

No, this set of settings blocks all Java, JavaScript, and ActiveX controls. There are a lot of different things that utilize ActiveX and JavaScript, not just hacked sites. Try online banking with ActiveX locked down. It doesn't fucking work.

Please read up on the settings before telling a userbase what to do and what to set:

Default IE6 settings of the IMPORTANT settings listed by Vandoura:

-Automatic prompting For ActiveX controls - DISABLED
-Binary and script behaviors - ENABLED
-Download signed ActiveX control - PROMPT
-Download unsigned ActiveX controls - DISABLED
-Initialize and script ActiveX controls not marked as safe for scripting - DISABLED
-Script ActiveX controls marked safe for scripting - ENABLED

These are the only ones that require any scrutiny at all. The settings on these are fine, and they are the default. All it takes is a little smart surfing.

It's bloody late, I'm tired, I'm not getting into Firefox versus IE right now (REAL MEN USE LYNX anyway), and my brother and his wife just had their first child. It was a girl, 9lb, 11oz, 21.75" long.

Good night, God bless, happy surfing.

-Tristam

 

[Bajaratt]

An even better solution is to learn what the fuck you're doing.

Not going to bother getting into all the crap out in the thread already; but you're right, actually being intelligent is better than using a more secure browser. Most people aren't intelligent though, or at least are complete retards when it comes to computers and their related security. I know what I'm doing, and I still use firefox, I very rarely even see any ads, let alone any security problems from them. My pages also load a little faster than normal since most of the ads never have to load up.

Just switching web browsers is a lot easier than learning how to use IE safely. Yeah, it doesn't take long to learn it if you're intelligent, but it's still more effort than just double-clicking on a different icon.

So, intelligence > secure browser > unintelligent with unsecure browser; but therefore intelligent with secure browser should be better than everything.

 

[Cort]

Sup

letters, etc.

 

[beeznuts]

My god, this is like a gear vs skill debate.
For god's sake, the skilled (computer literate) person knows that to perform their tasks best, they need the best, most appropriate gear (secure and well-patched software).

Like it or not, IE isn't that. IE has a horrible track record of security flaws that don't get fixed quickly. What exactly are good practices going to do for you when Microsoft takes their sweet time patching a browser vulnerability that you may or may not have heard about? Sure, you can secure a lot of them pretty easily...

Either way, you're being way too damn quick to write off alternative browsers just because you don't like them, Skaw... They're the simplest way to get around IE's frequent exploits and Microsoft's horrible track record with fixes. And yeah, no offense, but most people are too computer-illiterate to be safe, and probably never will be... :/

 

[Tristam Green]

My god, this is like a gear vs skill debate.
For god's sake, the skilled (computer literate) person knows that to perform their tasks best, they need the best, most appropriate gear (secure and well-patched software).

Like it or not, IE isn't that. IE has a horrible track record of security flaws that don't get fixed quickly. What exactly are good practices going to do for you when Microsoft takes their sweet time patching a browser vulnerability that you may or may not have heard about? Sure, you can secure a lot of them pretty easily...

Either way, you're being way too damn quick to write off alternative browsers just because you don't like them, Skaw... They're the simplest way to get around IE's frequent exploits and Microsoft's horrible track record with fixes. And yeah, no offense, but most people are too computer-illiterate to be safe, and probably never will be... :/

Damn you Garv, I feel like I've just been compared to jamal or meeze or something :crazy:

You're absolutely right though, average users are not versed enough in the usage of their computers and have the mentality they do when they drive a car.

When driving a car: "If it gets me to the XXX store and to the package store and back home, I'm happy."
When surfing the web: "If it gets me to the porn and to Google, I'm happy."

Loose analogy, but you get my drift.

Something that blows my mind daily is the balance between user interaction and patching of their machines. I'm speaking right now out of a corporate infrastructure where the updates that go to the user machines are checked by IT staff, then assigned for publication. All the user has to do is click "Restart Now" on their screen when the little yellow update shield comes up.


While the user says "I want my machine to be more secure", they don't necessarily want to see how it happens, which is unfortunate. Their complacencies in usage are their own worst flaws. They see the security updates (Windows Update Services, password policies, screenlock/screensaver policies) as beneficial, but also as an annoyance at the same time, leaving me with a "WTF" look on my face when they bitch that the "Little Update window keeps asking me to restart, and I keep saying 'restart later'."

Nerve-wracking, but I attempt to be patient and explain why they need to restart sooner, rather than later, and the importance of keeping their systems up-to-date.

The non-business world is no different.



To Skaw:
Firefox, Opera, and others are hardly "fads". Firefox has been in around since 2003, while not as long as IE, it is definitely not a flash-in-the-pan. Namely, its extensibility and common usage across different operating systems, along with its inherent security and stability are what set it apart from IE.

IE7 only shares tabbed-browsing with Firefox.


Opera has been around even longer, since 1994. I remember using Opera as a child. I didn't like it then, I don't like it now. It's just not for me, and while I'll be locked into using it for my DS, I won't use it on my computers.

I wouldn't jump to calling different internet browsers fads. It's sorta like telling someone apples are faddish while you're eating an orange (wooo! i love apples and oranges)

 

[Falsey]

Or frankly, I just get tired of people promoting fad browsers because they're too lazy to actually learn how to protect themselves, or deal out real answers.

Youre the person that still wants to read by candle light and refuses to acknowledge that the light bulb is better. You might call yourself old school, or smart, or a computer pro, but why fight whats clearly better?

I'm sure no one is going to get through to you, but you will have this whole attitude forever.