CERT can recommend anything they want, the fact is, most ignorant computer users use IE, so thats the target audience for attackers. If Mozilla or Netscape became the browser of choice for a majority of people, attackers would focus their attention at those applications. And who's to say that these apps won't produce more vulnerabilities once a majority of the attackers start working on these. Fact is, if someone wants to get attention or maximize their reward for an attack or whatever, why not exploit the most commonly used software...that's sure to make headlines if it's good enough.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/8998/27221#27221