While I don't have a crystal ball to refute your claims about future crops of applications, let me point out this:

The way unix works is different. If you compromise a process on windows, you've rooted the box. If you compromise a process on unix - you don't have much.

True, launching executable attachments in windows isn't a fault per-se of windows, but opening an e-mail message, or visiting a web site and having things done without user intervention is *their fault*.

Oh, one more thing. The last time I checked, running an executable on unix from an attachment wasn't something that just happens. You have to save the file and then give it execute permission. I think that will prevent the dummies from hurting themselves.

Cheers!

SPikey Mike

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/190/23158#23158