funsec mailing list archives

Re: Security flaw touches Windows Media Player, IE


From: Valdis.Kletnieks () vt edu
Date: Wed, 19 Oct 2005 12:42:29 -0400

On Wed, 19 Oct 2005 08:29:22 EDT, "Richard M. Smith" said:
Not for these flaws because they requiring scripting and ActiveX to be
turned on.  Outlook and other email readers now turn off this stuff.

Unfortunately, the software still comes with shiny clickable buttons that
let you turn that stuff back on.  This is important because people *will*
click on shiny clickable buttons if promised dancing hamsters as a result.

Any solution that involves "training" will be summarily discarded unless it
comes with either (a) an explanation of how CM Kornbluth was wrong or (b) a
citation on training chimpanzees *not* to push the button they've already
learned will release food/whatever - preferably without wiring the button to
the business end of a cattle prod. :)

Attachment: _bin
Description:

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread: