Sure seems like you hear the words “IE Security Hole” a lot, doesn’t it? Now there’s yet another security hole, and a malicious website could use it to get access to your files—it’s not a good thing, but here’s some quick tips to protect yourself.
当然,您似乎经常听到“ IE安全漏洞”一词,不是吗? 现在还有另一个安全漏洞 ,恶意网站可以使用它来访问您的文件-这不是一件好事,但是这里有一些快速提示可以保护自己。
Note that these are all workarounds, and don’t solve the actual vulnerability. These tips are helpful for any IE security hole, though.
请注意,所有这些都是解决方法,不能解决实际的漏洞。 但是,这些技巧对任何IE安全漏洞都是有帮助的。
Make Sure You Have Protected Mode Enabled
确保您已启用保护模式
As with most IE security holes, if you’re running Windows 7 or Vista, you should enable Protected Mode, which runs Internet Explorer in something similar to a sandbox—basically it protects you from malicious web pages a little more (though not completely).
与大多数IE安全漏洞一样,如果您运行的是Windows 7或Vista,则应启用保护模式,该模式以类似于沙盒的方式运行Internet Explorer,基本上可以保护您免受恶意网页的侵害(尽管不完全)。 。
Just head into the Internet Options –> Security tab, and click the checkbox.
只需进入Internet选项->安全选项卡,然后单击复选框即可。
![image image](https://i-blog.csdnimg.cn/blog_migrate/d9730a3f0f7f2584e13967c3b182798e.png)
Set ActiveX Controls to Always Prompt (or Disable Them)
将ActiveX控件设置为始终提示(或禁用它们)
If you just drag the slider in the screenshot above to High, you’ll have disabled ActiveX Controls from automatically running.
如果仅将上方屏幕快照中的滑块拖动到“高”,则将禁用ActiveX控件自动运行。
![image image](https://i-blog.csdnimg.cn/blog_migrate/09989e989d49573e7bae0f20def14cac.png)
The unfortunate side effect of this is that you’ll be prompted more often when visiting sites that use ActiveX Controls. Microsoft recommends that you add sites that you really trust to your Trusted Sites list… you’ll probably have to uncheck that “Require https” checkbox at the bottom though.
不幸的是,这样做的副作用是,在访问使用ActiveX控件的网站时,系统会经常提示您。 Microsoft建议您将真正信任的站点添加到“受信任的站点”列表中……不过,您可能必须取消选中底部的“ Require https”复选框。
To add a site to your Trusted Sites, click the Trusted Sites icon shown in the image above, and then click the Sites button, type in the website URL, and click the Add buttons. Clearly trust is a hard thing to earn…
要将站点添加到“受信任的站点”,请单击上图所示的“受信任的站点”图标,然后单击“站点”按钮,键入网站URL,然后单击“添加”按钮。 显然,获得信任是一件很难的事……
![image image](https://i-blog.csdnimg.cn/blog_migrate/e028d33ba5f4162e7db5bb08f249a040.png)
Extra: Disable Unnecessary Plugins
附加:禁用不必要的插件
Open up Tools –> Manage Add-ons from your IE menu, and then change the drop-down for “Show” to say “All add-ons”. This will then show you a list of all the current add-ons that are enabled, so we can start disabling stuff.
从IE菜单中打开“工具”->“管理加载项”,然后将“显示”下拉列表更改为“所有加载项”。 然后,这将向您显示所有已启用的当前加载项的列表,因此我们可以开始禁用内容。
![image image](https://i-blog.csdnimg.cn/blog_migrate/e9ecff70901210cfd4c586fabfb42e66.png)
At this point you’ll have a massive list of add-ons, and you can start disabling them by clicking on them, and then clicking Disable. Important to note: Adobe Reader seems to have one security hole after another, and if you don’t really need Java you should get rid of it.
此时,您将拥有大量的加载项,并且可以通过单击它们,然后单击“禁用”来开始禁用它们。 需要注意的重要事项:Adobe Reader似乎有一个安全漏洞,而如果您真的不需要Java,则应该摆脱它。
![image image](https://i-blog.csdnimg.cn/blog_migrate/0fd332511e1f367657c100ffc8f232b9.png)
My general principle is to disable everything I don’t need (or just everything), and then only enable add-ons if I really need them. Bonus: Disabling add-ons is the quickest way to make IE run much faster.
我的一般原则是禁用不需要的所有内容(或仅禁用所有内容),然后仅在确实需要时才启用加载项。 奖励:禁用加载项是使IE运行更快的最快方法。
Use Microsoft FixIt to Solve the Problem
使用Microsoft FixIt解决问题
One of the best things that Microsoft has come out with in the recent past is the “Fix it” feature on their support site—for many problems, you can simply launch a Microsoft-created utility that will solve your problem right there.
微软最近推出的最好的功能之一就是其支持站点上的“修复”功能-对于许多问题,您只需启动一个Microsoft创建的实用程序,即可在那里解决您的问题。
In this case, you can use Fix it to enable Network Protocol Lockdown. Just click the image below to head to the Microsoft site:
在这种情况下,可以使用“修复它”来启用“ 网络协议锁定” 。 只需单击下面的图像即可访问Microsoft网站:
![image image](https://i-blog.csdnimg.cn/blog_migrate/60ec950ce044825d8caa287854ba3b1d.png)
Use Microsoft Fix it to solve the Latest Security Hole
Read more information about the Latest Security Hole (as of February 4th, 2010)