blufive

In the aftermath of Download.ject (AKA scob) the web is suddenly alive with stories slating IE's (lack of) security. Some of them even recommend alternative browsers as a solution.

The trigger seems to have been one of the recommended solutions to a security warning from the US Computer Emergency Readiness Team:

Use a different web browser
There are a number of significant vulnerabilities in technologies relating to the IE domain/zone security model, the DHTML object model, MIME type determination, and ActiveX. It is possible to reduce exposure to these vulnerabilities by using a different web browser, especially when browsing untrusted sites.

And it's finally starting to happen. Virtually all the stats show IE losing ground and Mozilla-based browsers gaining it. Some show Opera picking up users from IE too. It's still only a very small swing, and way too early to start proclaiming IE's demise, but at the bare minimum, this is a wake-up call for Microsoft in the browser market.

Microsoft's PR response is somewhat predictable, and very modern-corporate-America in attitude:

Microsoft certainly respects the work CERT does to help protect the Internet and users. Regarding the consideration that users switch browsers, it is unfortunate that the published articles have misrepresented CERT's suggestions, and we are working with CERT to clarify their advice

[source: Wired News]

Translation: shoot the messenger.

[I am not gloating. Not until IE loses enough market share to hurt.]