[Previous] [Next] [Index] [Thread]

Re: ActiveX security hole reported.



The difference is the page may say turn off your computer
but the active X "program" may be advertised itself
as something else such the next killer program or 
somethings along those lines.  



Gary Meltzer wrote:
> 
> On Tue, 13 Aug 1996 17:57:52 -0400, stephen@iu.net wrote:
> 
> >>Some guy has written an ActiveX control which crashes windoze95... I don't
> >>use windoze so can't try it, but if someone else is brave, I'd love to know
> >>if it works...
> >>
> >
> >Yes, it works, turns off the machine...quite impressive.
> 
> Which part do people find the most impressive? -
> that the Win95 shutdown API works as documented
> or that all these security experts are downloading and running
> software designed to do something they don't want?
> 
> How does this control differ from an HTML page that tells
> readers to turn the power switch off?
> 
> - G.

--
Ray W. Hiltbrand                Ray.W.Hiltbrand@eng.auburn.edu
Engineering Network Services
Auburn University     http://www.eng.auburn.edu/~rayh/rayh.htm
   If it doesn't do what you want, subclass and override.


References: