Ah Vulcan,
I was wondering when I would hear from you on this. ;-)
Now then, as I recall my original argument, many many months ago, was that AVG was sufficient antivirus protection if you used an alternative browser and didn't surf porn and warez sites.
Your argument was, as I recall, that any mainstream site can infect you these days.
My response was that these attacks were almost always against unpatched, older browsers, and relatively uncommon, so I stood by my statement.
That was then.
As recently as a month ago, I was going on and on about how AVG is now basically totally worthless under any condition. I said that it was worse than nothing, because at least "nothing" doesn't give a false sense of security, which is what AVG gives you and which is worse than no security at all. I said that AV software was vitally important, and I told the original poster "you need it." I still stand by this.
My change in opinion was based on a number of things, most of which involve either the testing I do the magazine, or based on cleaning up my clients' computers, and asking them their surfing habits. WITHOUT EXCEPTION, all the users of owned PCs admitted to me they went to warez or porn sites within two days of the problem that required my attention. Every. Single. Service call.
It was not based on increased IFRAME attacks, and it still isn't. Even the article you linked to says the following:
"What has changed since the last time? The number and importance of the sites has increased..."
In other words, the last round of IFRAME attacks were more focused on marginal sites than the mainstream sites now being attacked. That sounds like what I said.
Frustratingly, the article and the links within it don't talk about what the vulnerability is specifically, and what browsers are affected, so I can't comment on the relative age and patch level of the affected browsers. I could guess though...
If you have a link, please post. I need to see it and learn from it. Thanks.
-Llama
