[Previous] [Next] [Index] [Thread]

Re: What's the deal ?



> 
> There was a security bug in a modified version of a browser used by a 
> company as part of their software distribution system. This effectively
> had the shell registered as the mime handler for the shell content type.
> Go figure.

Yes... one of the features of Mosaic we experimented with earlier. Worked
well with Macs and Windows.  While it might be useful in a closed
environment someone might just load http://who.knows.where/format.exe.
Aka, hugh hole.

bob


References: