• On GameSpot: Sony, Nintendo, Apple sued over wireless

The Download Blog

Read all 'Internet Explorer' posts in The Download Blog
November 20, 2009 9:00 AM PST

Browser security features compared

by Dennis O'Reilly
  • 10 comments

Internet Explorer 8, Firefox 3, Google Chrome 4, Apple's Safari 4, and Opera 10 include features that block sites known to host malware and malicious downloads. All but Opera also let you browse without leaving any tracks. But just as important as these protections is ensuring that whichever browser you use is thoroughly patched.

Filtering out bad sites
Firefox's built-in antiphishing tool claims to update its bad-site database 48 times a day, according to Mozilla's Firefox security page. Firefox 3 uses Google's Safe Browsing service to automatically block sites that are known to host malware. The Google Code site describes how Safe Browsing works in Firefox.

To verify that attack-site blocking is enabled in Firefox, click Tools > Options > Security and make sure "Block reported attack sites" is checked.

Mozilla Firefox Security Options dialog

Firefox will prevent known-bad sites from opening when "Block reported attack sites" is checked.

(Credit: Mozilla Foundation)

The same feature is built into Google's own Chrome browser. You can ensure that malware-site filtering is on in Chrome by clicking the wrench icon in the top-right corner, choosing Options, and selecting Under the Hood. "Enable phishing and malware filtering" should be checked. The Google Chrome Help site describes the feature. (Hint: This page looks very similar to the description on the Google Code site.)

Google Chrome Options Under the Hood settings

Google's Chrome browser blocks known-bad sites when "Enable phishing and malware protection" is checked.

(Credit: Google)

The SmartScreen technology in version 8 of Internet Explorer blocks known-malicious downloads as well as bad URLs. Other new security features in IE 8 include automatic blocking of click-jacking and cross-site scripting attacks, automatic crash recovery, and highlighting of the actual domain name in the address bar. The Microsoft Security site describes the SmartScreen Filter and includes links to a SmartScreen FAQ and information for site managers.

Apple's Safari browser added phishing and malware blocking in version 3.2, which was released in late 2008; read about this and other security features in Safari 4 on the Apple Safari site. Likewise, Opera's Fraud Protection predates the phishing and malware filters in IE and Firefox and is enhanced in the latest version 10. But attack-site blocking is only one of Opera's many security features, which you can read about on the Opera site.

Browsing in private
To activate private browsing in Firefox 3, click Tools > Start Private Browsing, or simply press Ctrl-Shift-P. You can set Firefox to start in private-browsing mode by clicking Tools > Options > Privacy and check "Automatically start Firefox in a private browsing session." The Mozilla support site provides more information about this feature. Likewise, put IE 8 in private-browsing mode by clicking Safety > InPrivate Browsing, or by pressing Ctrl-Shift-P. You can also open a new tab and click either Browse with InPrivate or Open an InPrivate Window.

IE 8 also lets you control the information about your browsing habits that's shared with Web tracking services. To activate this feature, click Tools > InPrivate Filtering Settings and choose "Let me choose which providers receive my information." This opens the InPrivate Filtering settings dialog, where you can turn filtering off, choose which services to block from tracking you, or automatically block all trackers.

Internet Explorer 8 InPrivate Filtering settings

Internet Explorer 8's InPrivate Filtering lets you block some or all Web tracking services.

(Credit: Microsoft)

You can open an incognito window in Google Chrome by clicking the wrench icon in the top-right corner and choosing "New incognito window," or simply press Ctrl-Shift-N. The incognito icon (a shadow figure in a fedora and glasses) appears in the top-left corner of the browser window. The Chrome support site offers a more detailed description of this feature.

Opera lacks an equivalent private-browsing capability but does offer private searching and other identity-blocking features, as described on the Opera site. To activate private browsing in Safari, simply click Safari Settings Menu > Private Browsing.

Automatic and not-so-automatic browser updates
Patching is a way of life with nearly all software, but especially with browsers and the media players associated with them: Adobe Reader, the Flash Player, Apple's QuickTime, and Sun's Java, among others. All of a browser's security features can be rendered useless by a piece of malware that takes advantage of an unpatched hole in the program.

Firefox 3 alerts users to the presence of an update and now also notifies you when your Flash Player is out-of-date. Internet Explorer 8 updates via the Windows Update/Microsoft Update services. Google Chrome made a splash by being the first browser to update itself in the background without requiring any prompting from users. Safari updates automatically via Apple's update service, which also serves up patches automatically for QuickTime, iTunes, and other Apple software. Opera also notifies you automatically when a new version is available.

But updating is too important to leave to others. Back in April, I described Secunia's Online Software Inspector and downloadable Personal Software Inspector, which identify out-of-date programs on your PC. The programs mentioned in that post have all been updated since, but Secunia's services should point you to the most recent versions.

(Note that Secunia sometimes reports a program as being out-of-date when in fact you have the latest version. On my PC, it continually reports my up-to-date Flash Player as being in need of an update, for example. But the free service Secunia provides is worth putting up with this and similar minor annoyances.)

Originally posted at Workers' Edge
Dennis O'Reilly has covered PCs and other technologies in print and online since 1985. Along with more than a decade as editor for Ziff-Davis's Computer Select, Dennis edited PC World's award-winning Here's How section for more than seven years. He is a member of the CNET blog Network, and is not an employee of CNET.
November 18, 2009 3:02 PM PST

With IE 9, Microsoft fights back in browser wars

by Stephen Shankland

With Internet Explorer 9, Microsoft showed Wednesday it's trying to retake the browser initiative.

IE remains the Net's dominant browser. But perversely, it became something of a technology underdog after Microsoft vanquished Netscape in the browser wars of the 1990s and scaled back its browser effort.

That left an opportunity for rivals to blossom--most notably Firefox, which now is used by a quarter of Web surfers, but also Apple's Safari, which now runs on Windows as well as Mac OS X, and Google's Chrome, which aims to make the Web faster and a better foundation for applications.

Microsoft has been pouring resources back into the IE effort, though, and at its Professional Developers Conference in Los Angeles, some fruits of that labor were on display. In particular, Windows unit president Steven Sinofsky showed off IE 9's new hardware-accelerated text and graphics.

The acceleration feature takes advantage of hitherto untapped computing power in a way that's more useful than other browser-boosting technology--Google's Native Client to directly employ PC's processor and Mozilla's WebGL for accelerated 3D graphics, for example--according to Dean Hachamovitch, general manager of Internet Explorer.

"This is a direct improvement to everybody's usage of the Web on a daily basis," Hachamovitch said in an interview after Sinofsky's speech. "Web developers are doing what they did before, only now they can tap directly into a PC's graphics hardware to make their text work better and graphics work better."

... Read more
Originally posted at Deep Tech
November 17, 2009 10:21 AM PST

Internet Explorer 9 not coming at PDC

by Ina Fried
  • 61 comments

LOS ANGELES--Although Microsoft intends to talk a bit about its plans for the future of Internet Explorer this week, the company won't offer preview code of its next browser, CNET has learned.

The software maker is also not planning to announce a move to the WebKit engine, as some had speculated.

Ray Ozzie, speaking Tuesday at Microsoft's Professional Developers Conference in Los Angeles.

(Credit: Ina Fried/CNET)

In his opening keynote at the Professional Developers Conference on Tuesday, Chief Software Architect Ray Ozzie pledged that Microsoft will make Internet Explorer the absolute best Windows browser, but did not offer further details.

Microsoft is expected to talk more about its browser plans as part of Wednesday's keynote speech. During that talk, he is expected to talk about some--but not all--of its "focus areas" for the next browser version, a Microsoft representative told CNET.

The latest version of IE 8 was released in March and is also built into Windows 7. Despite the new release, though, Microsoft faces intense competition from Firefox as well as from Google and Apple.

In addition, Microsoft has struggled to get Internet Explorer users to move past IE 6.

Originally posted at Beyond Binary
October 27, 2009 2:30 PM PDT

Firefox gains 30 million users in eight weeks

by Tom Espiner
  • 62 comments

Mozilla's open-source Firefox browser has gained 30 million users over the past eight weeks, as it continues to gain on Internet Explorer.

Chief Executive John Lilly revealed the increase in user adoption in a Twitter post on Monday, and Tristan Nitot, president of Mozilla Europe, confirmed it to ZDNet UK on Tuesday.

"We've seen a significant increase in the number of users for Firefox," Nitot said. "Firefox checks for new versions every 24 hours, when it's running, and when it checks, it pings the Mozilla server. We count the number of pings."

Read more of "Firefox gains 30m users in eight weeks" at ZDNet UK.

Originally posted at Webware
October 6, 2009 12:01 AM PDT

IE 6 for Windows phones: Interface improved

by Jessica Dolcourt
  • 4 comments

For a long time, Microsoft's browser for Windows Mobile phones has been a weak link in the Windows Mobile operating system. Internet Explorer Mobile has been infamous for being ungainly, slow, and so thin on browsing features that many high-end smartphones come preloaded with Opera Mobile 9.5.

Internet Explorer Mobile 6, now found on Windows Mobile 6.5 phones, addresses some of these failings head-on. The overhauled interface pulls navigation commands out of a text menu and places five round icons on the bottom that are just large enough to tap with a fingertip or a stylus. The browser shows off a cool, light theme instead of teal (the exact color scheme may vary by carrier).

Following a trend in mobile browser design, the navigation in Internet Explorer Mobile 6 disappears after a few seconds of disuse, leaving a full screen for browsing and a small button to call back the buttons, which include a back button, favorites menu, keyboard call-up, zoom key, and "More" menu. The "More" button presents a list of further options, including copy and paste.

... Read more
Originally posted at CTIA Fall show
September 24, 2009 9:42 AM PDT

Microsoft bashes Google's Chrome-in-IE plan

by Ina Fried
  • 106 comments

Microsoft on Thursday lashed out against Google Chrome Frame--an Internet Explorer plug-in that supplants IE's rendering engine with Google's.

The software maker, in a statement, said users are better off moving to a later version of Internet Explorer if they want the latest technology as opposed to using Chrome Frame.

Google plans to use Chrome Frame to, among other things, allow people to run Google Wave from within Internet Explorer.

(Credit: Google)

"With Internet Explorer 8, we made significant advancements and updates to make the browser safer for our customers," Microsoft said. "Given the security issues with plug-ins in general and Google Chrome in particular, Google Chrome Frame running as a plug-in has doubled the attach area for malware and malicious scripts. This is not a risk we would recommend our friends and families take."

However, some took Microsoft to task for criticizing plug-ins, noting that Redmond itself has more than a few.

"Microsoft scared of security of plug-ins. Uninstall Silverlight now," Mozilla's Dion Almaer wrote in a Twitter posting.

Google announced Chrome Frame on Tuesday, saying it can be used with Internet Explorer 6, IE7, or IE8 to use Chrome to render Web pages and execute their JavaScript programs. To work, users have to install the plug-in and Web developers must insert a line of code onto their Web sites that engages Chrome Frame when a person visits the site.

Update, 12:35 p.m. PT: I had a chance to chat with Amy Barzdukas, general manager for IE.

In addition to reiterating the security risks associated with running what she called "a browser within a browser," Barzdukas said that using Chrome Frame also interferes with the private-browsing and clear-browser-history features within Internet Explorer 8.

"That is not made clear," Barzdukas said. "That is a trade-off that customers would really want to make with eyes wide open."

Barzdukas also rejected the notion that it offers a good option for those still using Internet Explorer 6.

"If you are a user of IE6, you should get off IE6, not install another add-on," she said. "It just compounds your problem."

Update 3:20 p.m. PT: Google offered up a statement on its own, explaining its thinking behind Chrome Frame.

"Google Chrome Frame is an open source plug-in that is currently in an early developer release and was designed with security in mind from the beginning," Google said. "While we encourage users to use a more modern and standards compliant browser such as Firefox, Safari, Opera or Google Chrome rather than a plug-in, for those who don't, Google Chrome Frame is designed to provide better performance, strong security features, and more choice to both developers and users, across all versions of Internet Explorer."

Although it does increase the surface area, Google notes it brings some security features of its own, particularly for those running IE6. "Accessing sites using Google Chrome Frame brings Google Chrome's security features to Internet Explorer users, providing strong phishing and malware protection (absent in IE6), robust sandboxing technology, and defenses from emerging online threats that are available in days rather than months," Google said.

Originally posted at Beyond Binary
August 13, 2009 12:01 PM PDT

Microsoft: Breaking up with IE 6 hard to do

by Ina Fried
  • 130 comments

It's been roughly eight years since Microsoft released Internet Explorer 6, but in many ways the company is still very much tied to the aging product.

Although Microsoft has released two major versions of Internet Explorer in the past couple of years, for many, the face of Internet Explorer is still IE 6 in all its tabless glory.

In large part, that's because many of Internet Explorer's users are the ones who tend not to change the browser that comes with their operating system--either because that's the type of consumer they are, or because they are working on a work machine in which they are not able to upgrade to a later version of IE or switch to another browser.

Amy Barzdukas, the general manager for Internet Explorer, said in an interview this week that Microsoft's perception is "being built by a browser that was fine technology eight years ago or a decade ago."

But that's frustrating, particularly since Microsoft has invested a fair amount of effort in the last couple of years trying to rebuild IE after letting it languish for several years. Microsoft added things like tabbed browsing and a phishing filter back with Internet Explorer 7, which debuted in October 2006, and earlier this year launched Internet Explorer 8, with anti-malware features as well as a private browsing option and improved standards support.

Even with that work, though, IE 6 remains not only the most widely thought of version of Internet Explorer, but also the most widely used version of the browser, at least by a narrow margin. According to Net Applications, IE 6 accounts for 27 percent of the browser market, compared to 23 percent for IE 7. Microsoft's new IE 8 has more than 12 percent of the market, while Firefox 3.0--the most widely used version of that product--has 16 percent (See chart below).

(Credit: Net Applications)

Overall, Microsoft has been losing ground for several years to Firefox and other browsers. After reaching near ubiquity in the post-Netscape era, IE's global market share is now less than 70 percent. However, Barzdukas is hopeful that the trend is starting to shift with the release of IE 8.

"To the extent that IE was losing share over the winter, any rate of loss has substantially slowed since we came out with IE 8, and in some geographies IE overall has actually gained significant share," Barzdukas said.

One of the biggest things that could help Microsoft, Barzdukas said, is if more people understood that there were better browser options available from Microsoft. She has taken part of that task upon herself, making a pest of herself when she is at friends' houses for dinner--checking to see what version of the browser they are using.

A growing chorus of Internet users have asked Microsoft why, if it really wants people to move to IE 7 or IE 8, it doesn't just end support for IE 6. After all, there have been plenty of calls for the death of IE 6, particularly from Web developers, who are weary of the work required to make their sites work in multiple versions of Internet Explorer, as well as Safari, Firefox, and other browsers.

... Read more
Originally posted at Beyond Binary
August 7, 2009 5:11 PM PDT

Microsoft joins HTML 5 standard fray in earnest

by Stephen Shankland
  • 117 comments

After leaving much of the creation of a new version of HTML to Apple, Google, Opera, and Mozilla, Microsoft has begun sinking its teeth into the Web standard.

The move adds clout to the effort to renovate HyperText Markup Language, the standard used to describe Web pages, which last was formally updated in 1999. In a mailing list posting on Friday, the software giant offered a host of questions and concerns with the present proposal.

"As part of our planning for future work, the IE team is reviewing the current editor's draft of the HTML5 spec and gathering our thoughts. We want to share our feedback and discuss this in the working group," said Internet Explorer Program Manager Adrian Bateman in the message. "I will post our notes as we collect them so we can iterate on our thinking more quickly. At this stage we have more questions than answers, but I believe that discussing them in public is the best way to make progress."

HTML 5 in its current draft form includes a number of significant advancements, notably several that make the Web a better foundation for applications, not just static Web pages. Among the present HTML 5 features are built-in video and audio, the ability to store data on a local computer to enable use of Web applications even when offline, Web Workers that can perform computational chores in the background without bogging down Web application responsiveness, Canvas for creating sophisticated two-dimensional graphics, and drag-and-drop for better Web application user interfaces.

... Read more
Originally posted at Business Tech
July 31, 2009 12:13 PM PDT

Firefox: 1 billion downloads only part of the story

by Stephen Shankland
  • 89 comments

At about 8 a.m. PDT Friday, Firefox crossed the billion-download threshold--a notably large number for Mozilla's open-source Web browser but one that doesn't tell the whole story.

Firefox fans love their statistical milestones, and Mozilla enjoys fanning the flames by providing plenty of opportunities for self-congratulation. In 2008 was the Firefox Download Day, with more than 8 million downloads in 24 hours. Next came the Firefox 3.5 debut and its download tracker.

Mozilla boasted that Firefox downloads surpassed 1 billion on Friday.

Mozilla boasted that Firefox downloads surpassed 1 billion on Friday.

(Credit: Screenshot by Stephen Shankland/CNET)

And now we have the billion-download figure on the Spread Firefox site. That includes updates people have fetched deliberately, not automatic updates, Mozilla said. To maximize the marketing potential, Mozilla also is touting the 1,000,000,000 + you site.

That site probably could be named better. Firefox director Mike Belztner said in June that Mozilla estimates there are 300 million Firefox users, up from 175 million a year earlier, so don't go thinking there are a billion people using it. Indeed, I find the total user population a much more interesting statistic than downloads.

Firefox has truly achieved real success, eating steadily into Microsoft Internet Explorer's dominant market share to become the second-most used browser. The newest version is downloaded between 40 and 60 times a second worldwide at present.

IE 8 downloads surpass 200 million
But lest Firefox fans get too carried away with their success, there's another number that shows what Mozilla is up against. According to a source familiar with Microsoft's statistics, IE 8 has been downloaded more than 200 million times in the last four months since its release.

That's a fifth of the way to what Firefox achieved since Firefox 1.0 was released nearly five years ago. And Microsoft hasn't even begun pushing IE 8 through update in earnest yet. Microsoft's 200 million statistic doesn't include updates such as bug patches and security fixes.

So let's face it: being installed along with the world's most widely used operating system remains a huge advantage for IE's use, antitrust concerns notwithstanding. Microsoft declined to comment on its download statistics.

(Credit: Mozilla)

So what do all these numbers really show besides browser makers' urges to thump their chests about their popularity? This: the world of browsers is in serious flux.

Next-gen Web en route
That's because after years of near-dormancy after IE crushed Netscape in the 1990s, the browser wars are back in full swing. The growing migration of personal and professional activity to Web applications, the growing adoption of broadband Internet connections, and the growing adoption of truly Web-capable mobile phones are combining to make Web browsers a strategic asset in the computing industry. Apple, Microsoft, Mozilla, Google, Opera Software, and others all want to be the gateway to the world's most vibrant medium, the Internet.

Even the fifth-ranked browser can claim notable success. Opera's desktop browser has been downloaded more than 270 million times from the company's own servers since 2003, and the daily download rate has jumped from 30,000 to 40,000 back then to about 200,000 today, the company said. Throwing Opera Mini for mobile phones into the mix increases the total to about 500 million.

The download rates show that there's a powerful movement afoot to "upgrade the Web," as Mozilla's marketing catchphrase would have it.

It's a gradual change, with plenty of laggards such as corporate users who can't upgrade from IE 6 or cybercafes with locked-down PCs. And there's plenty of turmoil about next-generation Web standards. But the herd is gradually moving to more sophisticated browsers that collectively enable a more sophisticated Web.

Originally posted at Business Tech
July 17, 2009 8:01 AM PDT

Microsoft eases back on IE 8 default

by Stephen Shankland
  • 47 comments
For people who've set other browsers set as default, the IE 8 installer now always asks whether they want to make IE the new default.

For people who've set other browsers set as default, the IE 8 installer now always asks whether they want to make IE the new default.

(Credit: Microsoft)

Responding to widespread carping, Microsoft has made it less likely that Internet Explorer 8 will become the default browser against the user's wishes.

Previously, installing the browser offered an "express settings" that would make IE 8 the default browser without asking, though the custom settings route explicitly asked. Now the express settings will ask, too, Microsoft announced Thursday on its IEBlog.

"IE will never install, or become the default browser without your explicit consent. However, we heard a lot of feedback from a lot of different people and groups and decided to make the user choice of the default browser even more explicit," Microsoft said. Those who already have IE 8 set as default won't see the screen.

The change won't be built into the regular IE 8 installation, but instead will arrive as an update during the process beginning mid-August. The IE 8 installer asks users if they want to check for updates when they install, and 90 percent do so, Microsoft said.

One rival, Mozilla Chief Executive John Lilly, praised the move. "Good change: Microsoft does the right thing (finally) with IE8 updater," he said in a Thursday Twitter post.

Originally posted at Microsoft

Search Download Blog posts

About The Download Blog

Download.com editors cover the world of downloadable software and beyond.

Add this feed to your online news reader

The Download Blog topics

Most Discussed