2005-12-28
Expand all |
Post comment
Windows 0-day exploit found on Web
2005-12-29
TJONES (1 replies)
TJONES (1 replies)
Windows 0-day exploit found on Web
2005-12-30
Anonymous (1 replies)
Anonymous (1 replies)
|
Windows 0-day exploit found on Web
2005-12-28
Expand all |
Post comment
Windows 0-day exploit found on Web
2005-12-29 TJONES (1 replies) Windows 0-day exploit found on Web
2005-12-30 Anonymous (1 replies) |
|
|
Privacy Statement |
I call Astroturf.
The tight integration between Internet Explorer, Windows Explorer, Outlook, ActiveX, and the HTML control has been cause for exploit after exploit for the past seven years when they came out with what they called "Active Desktop" at the time.
Back in the old days we used to joke about a virus that could be spread just by opening an email message. It was a joke because nobody would possibly be stupid enough to feild a mail-reader that included a mechanism (no matter how wrapped around with "secirity zones" and certificates) for executing raw code in he message. When Microsoft went and did it, and made "Good News" real, we all KNEW that they'd back out this design flaw in no time. Anything else would be criminally foolish.
Well, hell, they not only didn't back it out, but they fought the DoJ to a standstill to keep it in, and they STILL have the same tight integration between secure and insecure components in the system.
NOBODY ELSE in the whole world has anything even vaguely like this. Only Microsoft. And the people responsible SHOULD go to jail.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/newsbriefs/89/403#403