Re: Are Java and JavaScript really so malicious for Windows systems?

From: Mark Randall (mark[__OKTHISISFAKE_)
Date: 11/25/05 

Date: Fri, 25 Nov 2005 11:15:59 -0000

"rusga" <reply@newsgroup.plz> wrote in message
news:op.s0scobywumizor@localhost...
> It's an important attack vector, as any security expert should know,
> period.

So were JPG's for several weeks and admins didnt block them, and they could
execute code *directly*.

> Also many "pushed" .js scripts might end up running in the "My Computer"
> zone context.

Not with a good policy and restricted account they dont.

> You should also read microsoft's advice on disabling active scripting as a
> workaround for unpatched vulns. You don't read them don't you?
>
> I guess Mark, you're one of those that rely too much on antivirus.

My antivirus, Firewalls, Backdoor scanners, page source, system hooks, and
my friendly pet decompiler :o)

> Good luck to you, you competant people.
> rusga

Quantcast