Post a Comment
i'd completely disable ActiveX by default on all IE browsers, via windowsupdate.
Windows Vista, if it is 'secure' will disable access to active X completely, at least I hope it will
Isn't activeX the main conduit between Internet Explorer and getting your windows box own3d ? spyware would have a hard time owning windows boxes if activeX was put where it should be, in the recycle bin.
you don't want your brand new windows box to look like this do you ? http://www.linux-noob.com/forums/index.php?showtopic=1025
please disable ActiveX users !!!
or use a web browser that doesnt offer that way in...
cheers
anyweb
>> That user purposely installed all those apps and search bars.
Which is the problem right there. The average user isn't SMART ENOUGH or WILLING TO LEARN the proper response when presented with the classic "Run this ____" box. Hell, I know people I consider smart enough who STILL make the wrong choice there 99.99% of the time - it's bad browsing habits borne of apathy, ignorance, and just plain wishful thinking.
I have seen it, all those bars and the pop-ups that go with them. I make money from these poor saps, but when they come knocking on my door for the second, third, and fourth time, I stop explaining to them that they have to learn to be careful and learn how to use their computers. It goes in one ear and out the other.
The fix would affect the way ActiveX controls are displayed on Web pages...
I think ActiveX is insecure by design and shouldn't be trusted. ActiveX objects contain actual executable code which IE can download and execute, possibly without the user's knowledge. There are lots of safeguards to avoid abuse, but obviously it is being abused anyway.
The safe thing is to not allow ActiveX to have control. The easiest way to do that is to never use IE.
It's not like every ActiveX control ever made is some malicious application.
True, but as you further point out, it's been abused.
Even Microsoft references "malicious code" in an increasingly common attack where a page filled with several ActiveX controls tries to frustrate you into always trusting the publisher—after which malicious code is delivered in the last control.
http://www.microsoft.com/technet/security/secnews/articles/itprovie...
This does not build confidence.
Ok I found two links but took some googling.
http://msdn.microsoft.com/library/default.asp?url=/workshop/author/...
http://www.macromedia.com/devnet/activecontent/#captivate_before






