Browser security comparison - IE8 the most secure browser at the moment

[Kaotik]

Results taken from http://nsslabs.com/browser-security

The first results are efficiency against malware, the second against phishing (as the images tell themselves, too)

edit:
The reports themselves:
Malware: http://nsslabs.com/test-reports/NSS Labs Browser Security - Socially Engineered Malware Q3 2009.pdf
Phishing: http://nsslabs.com/test-reports/NSS Labs Browser Security - Phishing Q3 2009.pdf

 

[Npl]

"Note: This study does not compare browser security related to vulnerabilities in plug‐ins or the browsers themselves"

As far as I understood they monitored if browsers detect "bad" links based by checking back with an online-database (and how long they take to recognise it).
I dont get why browsers should filter out virus-executeables or such alike, just run an virus-scan if you are unsure.

 

[Mize]

It also didn't measure false positives.

 

[Richard]

Pfff... you want 99% block rate? Stop visiting warez and pr0n websites.

 

[Davros]

or just ban flash, java, javascript, activex, plug ins, and all that other nonsense

 

[Arwin]

Well, it's nice to see that Internet Explorer is at least good at something!

 

[Simon F]

or just ban flash, java, javascript, activex, plug ins, and all that other nonsense

Isn't that what the "No Script" Firefox extension is for?

 

[Rolf N]

I wonder how much of that malware can only infect IE clients to begin with.

 

[Mize]

I wonder how much of that malware can only infect IE clients to begin with.

LOL. yeah, let's ding Firefox or Opera for not detecting ActiveX malware

 

[Mize]

In addition, the report itself is suspect as it is funded by Microsoft. Funding aside, the timing of the report and the breakdown of testing is something that one needs to take a long hard look at.

no disclosure of the sites, so no peer review, MS funded...maybe mostly ActiveX...great FUD

More Baloney:

http://my.opera.com/haavard/blog/2009/03/26/malware-report-from-nss-labs-manipulates-statistics

 

[Grall]

Don't really care which browser is most secure, I run IE8 simply because then I don't have to update/maintain a separate piece of software. Pure laziness in other words.

...Besides, it runs relatively well also (except flash seems to be causing intermittent hangs/crashes again now... *sigh* And I thought they'd finally fixed that BS!) IE8 also does what you want it to do (mostly; text selection with the mouse is a bit buggered much of the time), and it has all the features I need. Well, except autocomplete in the built-in search bar, that'd been nice. I'm really surprised they didn't fix that in IE8.

 

[Arwin]

Don't really care which browser is most secure, I run IE8 simply because then I don't have to update/maintain a separate piece of software. Pure laziness in other words.

Most other browsers (like Opera and Chrome) are much less of a pain to maintain and update than IE though. They install in mere seconds. Chrome keeps itself up-to-date, and Opera occasionally asks you if you want to update, and then that also takes maybe 15 secs.

 

[Neb]

Most other browsers (like Opera and Chrome) are much less of a pain to maintain and update than IE though. They install in mere seconds. Chrome keeps itself up-to-date, and Opera occasionally asks you if you want to update, and then that also takes maybe 15 secs.

IE also updates automatically through windows update and is as transparent as any other Windows update installation. Any reason it would be a hassle is if a pirated copy is used and it has to be updated manually by downloading update from Windows update site. However I believe non of you on this forum use pirated copy which is good. I am proud.

Even when auto updating or notified about new IE version it is simple, just a click and it also keeps your settings, bookmarks etc else from previous version.

 

[Neb]

Pfff... you want 99% block rate? Stop visiting warez and pr0n websites.

People should use anti malware site configured hosts file.

http://www.mvps.org/winhelp2002/hosts.htm


Shit that file config alone increases surfing safety by 8 notches and removes a heck of a lot ads, shit banners and dirty site access. I once made a test by entering 40 dirty sites without modified hosts file and got 5 malwares. I just flushed my VM resetting it and redid the test but with modified hosts file and got nothing.

But all in all I couldn't care any less about browser safety as I use my VM to browse the net and whatever it gets it is gone with a VM reboot. Got Opera, IE, Firefox but aint touching anything that has to do with Apple... well I do have Quicktime installed as a reminder for how shitty software destroys an OS and only POS that can crash my VM.

 

[Arwin]

IE also updates automatically through windows update and is as transparent as any other Windows update installation. Any reason it would be a hassle is if a pirated copy is used and it has to be updated manually by downloading update from Windows update site. However I believe non of you on this forum use pirated copy which is good. I am proud.

Even when auto updating or notified about new IE version it is simple, just a click and it also keeps your settings, bookmarks etc else from previous version.

I know all this of course. I was addressing Grall's first sentence, that's all.

 

[Richard]

But all in all I couldn't care any less about browser safety as I use my VM to browse the net and whatever it gets it is gone with a VM reboot. Got Opera, IE, Firefox but aint touching anything that has to do with Apple... well I do have Quicktime installed as a reminder for how shitty software destroys an OS and only POS that can crash my VM.

BTW, why do you use QT?

OT, I agree with you: IE is still the most painless browser to upgrade, at least from my view as a non-user. I don't know how hard it is to backup/export bookmarks, settings, etc. but for your standard upgrade live system to bigger version number dealie, IE is pretty seamless.

 

[Grall]

Most other browsers (like Opera and Chrome) are much less of a pain to maintain and update than IE though.

I don't agree. IE8 updates automatically from windows update, no need for any additional prompts or anything like that. It's just easier this way, I feel. And there's no need to hit any external sites to download another browser installer either of course when I've just done a clean reinstall of the OS.

This is the blessing/curse that microsoft brings its users. Convenience, but at a price.

 

[Neb]

BTW, why do you use QT?

OT, I agree with you: IE is still the most painless browser to upgrade, at least from my view as a non-user. I don't know how hard it is to backup/export bookmarks, settings, etc. but for your standard upgrade live system to bigger version number dealie, IE is pretty seamless.

Some game videos required it as there was no other alternative.

 

[Arwin]

Well fine, but for Chrome for instance it's go to google.com, go to the Chrome download, download and install (a few clicks), and that's it. You'll never have to worry about it ever again, updates itself automatically, without you even noticing it.

Anyway, you're demonstrating why the whole pooha about offering different browser options during a Windows install is important.

 

[Richard]

This is the blessing/curse that microsoft brings its users. Convenience, but at a price.

I thought that was Apple. Microsoft is: more flexibility for less soul. :|

Some game videos required it as there was no other alternative.

Okay, I use VLC myself for watching QT movies though with the advent of MP4 I've been forced to use it less and less.