1) RTFA: Not only are the "gyrations" there, but warnings pop up to let the user know exactly what may go wrong if they do it.

2) Outlook does not just "execute" attachments by itself? yes and no (ever hear of Active X controls? HTML mails can execute those eaily enough, and just today MS warned of yet another problem w/ IE and ActiveX that somehow hasn't been patched yet.)

Oh, and that SSL/SSH bug that you crowed on about? SSH isn't a feature of any Linux e-mail reader, genius - and SSL only works in web-browsers, (unless you use Outlook or OE of course... where IE turns on and kicks in by default)

3) Non-admins in a default Windows install can install and run anything they want under most circumstances. Care to see the massive list of viruses that take advantage of this? Oh, wait - the media has been chronicling that very thing for YEARS now.

"Give them a different OS and they'll still abuse it to get things done."

RTFA again... the author said the same thing you just said, only he also said that OSX and Linux are HARDER TO ABUSE.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/188/22806#22806