Bugtraq mailing list archives
Re: Windows Server 2003 Security Guide available
From: Lucas Holt <luke () foolishgames com>
Date: Tue, 29 Apr 2003 15:45:59 -0400
You do not need Microsoft Office to open word documents.. AppleWorks will do it, and maybe open office/star office? Granted, Microsoft has a monopoly. I think you can open word documents with Wordpad which is free (and lousy). If you are reading a windows security document, you probably have a windows box with wordpad. There used to be a word 97 viewer as well that was free.
Plain text files would be the only "safe" format. Even Acrobat documents have security problems.
Another thing that troubles me about this debate is MITM attacks period. Lets face it, any file format is susceptible to this sort of thing. I could put up a fake microsoft MSDN library website and use DNS poisoning to give developers bad documentation.
What next? Force users to use SSL for all websites? Stop using the internet all together?
What I found interesting is that some of the documentation is in Microsoft Word or MS Excel format. This implies that to take full advantage of the information, you need to own an MS Office license.Is this another example of abuse of monopoly? For that matter, are .docor .xls documents necessarily safer than .exe's? You decide... -- David.
Lucas Holt Luke () FoolishGames com ________________________________________________________ FoolishGames.com JustJournal.com"The next generation of interesting software will be made on a Macintosh, not an IBM PC."
-- Bill Gates (unconfirmed quote)
Current thread:
- Windows Server 2003 Security Guide available Michael Howard (Apr 25)
- RE: Windows Server 2003 Security Guide available Jason Coombs (Apr 28)
- RE: Windows Server 2003 Security Guide available David F. Skoll (Apr 29)
- RE: Windows Server 2003 Security Guide available Uwe Betz (Apr 29)
- Re: Windows Server 2003 Security Guide available Lucas Holt (Apr 29)
- RE: Windows Server 2003 Security Guide available Frank Knobbe (Apr 29)
- RE: Windows Server 2003 Security Guide available Jason Coombs (Apr 29)
- RE: Windows Server 2003 Security Guide available David F. Skoll (Apr 29)
- <Possible follow-ups>
- RE: Windows Server 2003 Security Guide available paul (Apr 29)
- RE: Windows Server 2003 Security Guide available J.'LoneWolf' Mattsson (Apr 29)
- RE: Windows Server 2003 Security Guide available Jason Coombs (Apr 28)