Another zero-day threat hits Windows

TalkBack 38 of 71:

Next »

« Previous

• Thread View
• Flat View

Thanks

His post makes a little more sense. The reason Firefox and Opera are much less likely (never say never) to allow for an exploit to take over a computer is ActiveX. Pure and simple, the rock solid security model of asking a user "are you sure you want to continue" for some reason fails.

MS should remove Active X, apologize to the world for ever creating it, and MS would go 90% of the way to actually securing their OS. To all who say too much depends on ActiveX, too bad. If I.E.7 dropped it tommorrow, in a month, ActiveX functions would be replaced with what, by default, is better software.

They won't for 3 reasons.
1) It excludes Linux, Job #1 at MS
2) How can they sell onecare if their OS were secure? Job #1 at MS
3) WGA, Activation, and a host of other intrusive services that RELY on the porosity of ActiveX access to the OS would be much harder to FORCE on users. Job#1 at MS

NOTE: On #3, there is no firewall that can block it, there is no AV that can stop it, there is security setting that can slow it down. Requiring ActiveX for all that provides unencumbered access to the OS for MS (and any semi-intelligent cracker, but that's not really MSs problem is it).

TripleII

Posted by: TripleII   Posted on: 09/30/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Using NIC Teaming to Achieve High Availability on Linux Platforms Dell Network interface card (NIC) teaming is one method for providing high ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now