Microsoft defends patch policy

TalkBack 12 of 14:

Next »

« Previous

• Thread View
• Flat View

Let's see...

It's been at least 6 years since security people pointed out (and demonstrated with code samples) to Microsoft that ActiveX is an open invitation to the hacker community. 6 years later, the exploits continue. And not just the lesser exploits that other OS's fall victim to (like DoS attacks), but allowing *executables* to be installed and run on the victim's machine, without input from, or knowledge of, the user. All thanks to ActiveX and IE/Outlook, and Microsoft's hell-bent-for-leather decision to put brains on the back burner and try to usurp the Internet through proprietary HTML extensions and scripting functionality. Well, it backfired big time.

I guess in a perverse sort of way, there is Karma: according to what I understand, ActiveX is a direct result of IBM's contribution to the joint OS/2 project with Microsoft (and where MS promptly stuck the knife in IBM's back and waltzed off with IBM's IP, saying "See you 'round, Fool!") Also, according to what I understand, IBM *never* intended the technology on which ActiveX is based to be used in conjuction with WAN/Internet technologies. This is Microsoft's little 'innovation.' For which we're all paying a steep price now.

Six years. Let that sink in a bit.

Posted by: Yen_z   Posted on: 11/13/03 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now