funsec mailing list archives
Re: Security flaw touches Windows Media Player, IE
From: Valdis.Kletnieks () vt edu
Date: Wed, 19 Oct 2005 12:42:29 -0400
On Wed, 19 Oct 2005 08:29:22 EDT, "Richard M. Smith" said:
Not for these flaws because they requiring scripting and ActiveX to be turned on. Outlook and other email readers now turn off this stuff.
Unfortunately, the software still comes with shiny clickable buttons that let you turn that stuff back on. This is important because people *will* click on shiny clickable buttons if promised dancing hamsters as a result. Any solution that involves "training" will be summarily discarded unless it comes with either (a) an explanation of how CM Kornbluth was wrong or (b) a citation on training chimpanzees *not* to push the button they've already learned will release food/whatever - preferably without wiring the button to the business end of a cattle prod. :)
Attachment:
_bin
Description:
_______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- Security flaw touches Windows Media Player, IE Fergie (Paul Ferguson) (Oct 18)
- RE: Security flaw touches Windows Media Player, IE Richard M. Smith (Oct 18)
- RE: Security flaw touches Windows Media Player, IE Aditya Deshmukh (Oct 18)
- RE: Security flaw touches Windows Media Player, IE Richard M. Smith (Oct 19)
- Re: Security flaw touches Windows Media Player, IE Valdis . Kletnieks (Oct 19)
- RE: Security flaw touches Windows Media Player, IE Larry Seltzer (Oct 19)
- RE: Security flaw touches Windows Media Player, IE Richard M. Smith (Oct 19)
- RE: Security flaw touches Windows Media Player, IE Larry Seltzer (Oct 19)
- RE: Security flaw touches Windows Media Player, IE Nick FitzGerald (Oct 20)
- RE: Security flaw touches Windows Media Player, IE Aditya Deshmukh (Oct 18)
- RE: Security flaw touches Windows Media Player, IE Richard M. Smith (Oct 18)