When news of the Java vulnerability broke, security experts' advice was clear-cut: Disable the Java browser plug-in immediately unless you absolutely need it. The fact that Java applets have grown relatively scarce on the Web, coupled with Oracle's sluggish response to the problem, made that an easy call for most. (Java has since patched the hole, for what it's worth.)
So if you're a Windows XP user, should you now dump Internet Explorer as well? Perhaps, experts say, though the hack shouldn't be a cause for mass panic. For one thing, Microsoft itself has responded quickly with a security advisory that includes an extensive list of work-arounds. Its apparent sense of urgency suggests that it may offer a prompt update that patches the problem, though it hasn't done so yet.
Unfortunately for Microsoft, the work-arounds are a bit cumbersome and could affect your browsing experience - potentially more so than just switching to another browser. And while IE loyalists could just try to avoid potentially malicious websites and hope for the best, you never know. "I would recommend not using Internet Explorer until this issue is patched," Sophos' Chet Wisniewksi says. "While the exploit is not in widespread use, it could be integrated into popular attack kits like the Blackhole Exploit Kit any time now."
For those who were already thinking of switching to another browser, such as Google's super-fast Chrome, Mozilla's highly customizable Firefox, or Opera, consider this the perfect time. If you don't like it, you can come back to IE once Microsoft fixes this flaw.
Our new comment system is not supported in IE 7. Please upgrade your browser here.