-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
____/ nessuno@xxxxxxxxxxxxxxxxxxx on Wednesday 27 August 2008 02:57 : \____
> On Aug 26, 3:14 pm, Roy Schestowitz <newsgro...@xxxxxxxxxxxxxxx>
> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Novell's iPrint open to attack, say researchers
>>
>> ,----[ Quote ]
>> | Attackers can exploit bugs in Novell Inc.'s iPrint application to obtain
>> | corporate information or hijack computers, security experts said today.
>> |
>> | Novell has issued a patch that plugs multiple holes in the ActiveX control
>> | that Novell ships as part of its iPrint product, but according to
>> | Copenhagen-based bug tracker Secunia APS, one of the flaws remains
>> | unfixed.
>> `----
>>
>> http://www.computerworld.com/action/article.do?command=viewArticleBas...
>
> I thought Apple had a copyright on the "i" + "Capital Letter". How
> can Novell dare???
>
> More from the article:
> <Quote>
> This is not the first time that Novell has had to quash bugs in
> iPrint's ActiveX control. Just two months ago, a researcher at the
> U.S. Computer Emergency Readiness Team (US-CERT) uncovered several
> vulnerabilities in the control packaged with iPrint for Windows 2000
> and Windows XP. Novell patched those bugs with the iPrint 4.36 update
> in June.
>
> ActiveX vulnerabilities are commonplace. Earlier this year, in fact,
> Symantec Corp. reported that the Microsoft Corp. technology accounted
> for 79% of all browser plug-in bugs in the second half of 2007.
> </Quote>
How many bloggers have they threatened so far for highlighting security
problems in this 'extend & extinguish' technology?
> Wikipedia compares ActiveX to java applets, saying that one difference
> is that java runs on anything but ActiveX is only Windows/IE.
> Surprise. Another contrast: "ActiveX controls are also granted a
> much higher level of control over Windows than Java applets, making
> them both more powerful and dangerous. Malware, such as computer
> viruses and spyware, is often distributed as ActiveX controls in
> webpages."
>
> http://en.wikipedia.org/wiki/ActiveX
>
> I think I'll go get an iBeer.
You need the license the 'i' on your beer then.
- --
"There's a lot of Linux out there -- much more than Microsoft generally signals
publicly -- and their customers are using it..." --Paul DeGroot, a Directions
On Microsoft analyst.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAki1BJkACgkQU4xAY3RXLo55ygCgkEbrQSwcopyEOAPNxaJ2q6EN
g5QAnR+ks2/gjvT5mcl21Z2RvkZs9lr9
=K55Q
-----END PGP SIGNATURE-----
|
|
