Internet Explorer patch coming soon

Stephen Withers
Wednesday, 20 January 2010 02:16

Business IT - Security

The reason Microsoft adopted a monthly update schedule was to make it easier for system administrators to schedule the work needed to thoroughly test updates for compatibility with applications before they are pushed out to the entire fleet of PCs.

You wouldn't want to arrive at your local bank branch only to be met with a sign saying "Sorry, all of our computers have stopped working so we can't serve you."

Indeed, the time and effort needed to test the compatibility of a new browser with existing web-based applications and then make any necessary changes is probably one of the reasons why there are so many copies of Internet Explorer 6 still in use at so many corporate sites.

If there's some crucial component of a process that only works with Internet Explorer 6 because its developer hasn't kept up with the times (or charges more for a new version than the organisation is prepared to pay), that acts as a significant incentive to stay with the old browser. Now, if anyone wants to argue that's a good reason for insisting on compliance with web standards rather than coding to a specific browser, we wouldn't argue. But that doesn't do much to help an organisation that finds itself in that situation.

Some security experts are of the opinion that attacks have become so commonplace that it makes more sense to apply security-related patches immediately to all but the most critical systems. If incompatibilities are subsequently detected, the affected PCs can be rolled back to their previous configuration until the issue can be rectified.

Unlike some of its European counterparts, the Australian Federal Government is not actively advising users to switch to a different browser. A Stay Smart Online alert to home and small to medium sized business users recommends they follow Microsoft's advice about including Internet Explorer security, including the activation of DEP (data execution protection) on systems where it is not enabled by default.

The alert only suggests installing a different browser such as Firefox or Safari "If you do not wish to install the temporary fixes".

Some commenters on an ABC story about the Government's warning claim that the use of Internet Explorer 6 is still mandated in various Federal Government departments.