LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-13-2004, 02:15 PM   #1
lynxgogo
Member
 
Registered: Jul 2003
Location: The Netherlands
Distribution: Linux SuSE 9.3 Pro 64-bit
Posts: 58

Rep: Reputation: 15
Using Internet Explorer and Security


This is something i don't like to write, but i have too.

My boss is blackmailing my into working with Internet Explorer (MS crap). If i don't, i can't reach the office through the web.

So i can install Internet Explorer through Crossover Office, no problemo. But what are the security risks for my system (suse 9.1 pro) when i use it?

Can anybody give me some good advice, and not by saying sack your boss or talk some sense into him.

Greeting
Marcel (Lynxgogo )

Last edited by lynxgogo; 10-13-2004 at 04:04 PM.
 
Old 10-13-2004, 02:41 PM   #2
iainr
Member
 
Registered: Nov 2002
Location: England
Distribution: Ubuntu 9.04
Posts: 631

Rep: Reputation: 30
You have two advantages. First, you are only using IE to access a known, trusted site where the risk of someone planting an exploit is (hopefully) pretty low.

Secondly, you are running IE on Linux (and, I assume, as a non-root user) so most of the exploits probably wouldn't work anyway - or at least wouldn't achieve very much.

Overall, apart from having a generally unpleasant browsing experience I doubt you've got too much to worry about. Nothing's perfect, but I doubt the risk to your system is great enough to be too concerned. (I take it you've got a decent firewall running too).
 
Old 10-13-2004, 03:52 PM   #3
lynxgogo
Member
 
Registered: Jul 2003
Location: The Netherlands
Distribution: Linux SuSE 9.3 Pro 64-bit
Posts: 58

Original Poster
Rep: Reputation: 15
Thanx Iain,

Yes it's a secure connection; and i only run the user when doing normal work and of cause i have got some firewall (hard & soft).
But, thanks for the reassurance.

greetings
Marcel
 
Old 10-14-2004, 07:39 AM   #4
jago25_98
Member
 
Registered: Jun 2001
Posts: 302

Rep: Reputation: 30
there's more you can do.

you could run iexplore as a seporate user that only owns just enough to run it

you could also try getting your other browser to report it's ID as Internet Explorer
 
Old 10-14-2004, 10:32 AM   #5
lynxgogo
Member
 
Registered: Jul 2003
Location: The Netherlands
Distribution: Linux SuSE 9.3 Pro 64-bit
Posts: 58

Original Poster
Rep: Reputation: 15
Jago

Your remark

you could also try getting your other browser to report it's ID as Internet Explorer

sounds very interesting, but how does it work?

greetings
Marcel
 
Old 10-15-2004, 08:10 AM   #6
iainr
Member
 
Registered: Nov 2002
Location: England
Distribution: Ubuntu 9.04
Posts: 631

Rep: Reputation: 30
When a browser connects to a web server it tells the web server what type of browser it is (e.g. IE6, Netscape 5, Opera) which can be picked up in CGI scripts. This allows web sites to block certain browsers (weird and nasty, but some do) or to behave differently with different browsers.

To get round this, a lot of browsers (e.g. Konqueror, Opera) have the ability to pretend to be a browser that they're not. They could present themselves as IE6, for example.

This works if the only reason you use IE6 is because someone has coded the web server to block other browsers. However, in a business environment it's quite likely that someone has coded an app than works with IE6 and not other browsers (e.g. uses ActiveX) in which case it doesn't help you much - you can connect, but you can't do what you need to.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Internet Explorer vs. Other Browsers (Internet Standards) smaida Linux - General 6 10-11-2004 04:27 AM
Internet Explorer only internet page?? jimdaworm Linux - Software 9 08-08-2004 02:26 PM
About Internet Explorer* jamaso General 8 07-06-2004 10:11 AM
internet explorer fiburglas Linux - Networking 8 05-26-2003 12:08 PM
Internet explorer 6 RecoilUK LQ Suggestions & Feedback 1 01-25-2002 08:17 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:13 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration