-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
____/ Rex Ballard on Tuesday 12 August 2008 09:32 : \____
> On Aug 12, 1:17 am, Little Mad Dog <M...@xxxxxxx> wrote:
>> Rex Ballard wrote:
>> <snipped>
>> It's a Chicken Little post and Chicken Little hype.
>
> Not exactly. It's actually a well known exploit that shows that
> "nothing has changed". If anything Microsoft has opened MORE back
> doors since 1997.
>
> Right after IE4 was released, back in 1997, Tracy Reed at www.ultraviolet.org
> put up a site that showed how easy it was to circumvent ANY security
> mechanisms with simple web pages that abused VBScript and ActiveX
> controls.
>
> About 3 weeks later, he announced that Microsoft had gotten a court
> order and injunction ordering him to take down the information,
> because of "damage to brand" and "intent to encourage security
> violations".
Can you find this announcement for me?
> Over the last 10 years, it's been the same scenario several times.
> Someone posts examples of how easy it is to hack Microsoft using
> vbscript, javascript, and .NET, and a few weeks later, they have taken
> down their content, putting a notice that they have taken it down as a
> result of a court order.
>
> The latest "wide open back door" is OpenXML, which makes it really
> trivial to feed trojans into almost any Microsoft Office document.
>
> Many times, when the perpetrators of major viruses are caught, it's
> discovered that the means used to actually spread the viruses was
> these same trivial tactics. Often the viruses, worms, trojans, and
> malware that we see with Antivirus are spread using these same
> mechanisms.
- --
~~ Best of wishes
Roy S. Schestowitz | Anonymity - established 2001, Google Groups
http://Schestowitz.com | Open Prospects | PGP-Key: 0x74572E8E
Tasks: 195 total, 1 running, 194 sleeping, 0 stopped, 0 zombie
http://iuron.com - knowledge engine, not a search engine
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkihdqkACgkQU4xAY3RXLo5jgACfcMjyqp//9+K4QYV9ko65MTvu
XFYAmwbPYn0owpZr5IvFXaNn17+u/7dR
=RTtj
-----END PGP SIGNATURE-----
|
|
