Judle Wrote:Lololol Opera got owned
I don't see how this is true. I mean, it does a great job to inform people when you throw about generalized statistics that noone really understands completely, but whether the summary of the information indicates the reality; if you read the actual report from NSS Labs, you would soon see that all they are testing for is how well the browser protects its users against their own idiocy.
NSS Labs Report: Web Browser Security: Socially Engineered Malware Protection Comparative Results Wrote:... This report examines the ability of six different web browsers to protect users from socially engineered malware...
...
For the purposes of this test the following definition is used for socially-engineered malware: following a URL link directly leads to a âdownloadâ that delivers a malicious payload whose content type would lead to execution.
...
NSS Labs assessed the browsersâ ability to block malicious URLs as quickly as we found them on the Internet. We continued testing them every two hours to determine how long it took a vendor to add protection, if they did at all.
What this means is, NSS Labs performed a test where they visited sites that link to malicious files that you can
chose to download and then kept visitng them every two hours to see how long it would take for the site to be blacklisted by whoever provides the checks (In the case of Opera, this would be
Haute Secure as of 9.5).
The report should really have better summarized what the statistics mean and how they can be applied. For example, a more valid conclusion for the report would be: It would be dangerous to use Opera if...
A. You do not use antivirus software.
or
B. You're a complete idiot who downloads any file whenever prompted to, and you have no understanding that some files can be hazardous.
If you are an idiot I would happily suggest that Opera is a bad choice for a web browser based on the information from this test.
However, Opera is still a very secure browser.
Wikipedia: Vulnerability (computing) Wrote:Vulnerabilities may result from weak passwords, software bugs, a computer virus or other malware, a script code injection, a SQL injection or misconfiguration.
Note: viruses and malware, as listed above would be ones that the computer is already infected with.
The main thing that Opera is responsible for is protecting against is an attacker exploiting software bugs, and its record for unpatched vulnerabilities (absence of) is unmatched. This information is not presented in the report as the test conducted by NSS Labs is completely unrelated.
I guess if I were to present information in the same way that the Neowin article does, I could say that every browser except Opera is vulnerable to 100% of security flaws citing the value 100% which appears when you do a Google search for "100%".
For more detailed information, or if you think my quotes may have been taken out of context, you can read the full report here:
NSS Labs Report: Web Browser Security: Socially Engineered Malware Protection (PDF)
Source:
Wikipedia - Vulnerability_(computing)