
With the advanced attack on Google China shown to be using "zero day" security flaws, the debate over browser security heats up. In an interesting article at BetaNews Joe Wilcox looks at the detail surrounding the attacks and talks about browser selection in general. Whilst it is never quite so simple in reality to simple "switch" browser (there are still sites that insist on quite a limited selection of supported browsers), it is probably time to use the "horses-for-courses" approach and minimize usage of older or less secure versions to just the sites that require them.
The best quote in the article we saw:
"5. According to the MSRP bulletin, the default security setting for IE running on Windows Server 2003 and 2008 is "high." As it should be. But the better security measure is obvious: Never use a Web browser on a server behind the corporate firewall."
Now that's some good advice.
