Re: Are Java and JavaScript really so malicious for Windows system

From: Alun Jones (alun_at_texis.invalid)
Date: 11/29/05 

Date: Mon, 28 Nov 2005 20:07:22 -0800

Ian wrote:
> IMHO, enforcing a company policy that Internet Explorer shall only be
> used on trusted sites would be far more effective. Other sites would be
> accessed with Firefox, Mozilla or Opera.

Why? How do these browsers secure you in a way that Internet Explorer
doesn't? More precisely, other than "we haven't yet seen as many
vulnerabilities", what makes you think these browsers are inherently more
secure? Please point to technology and process, rather than statistics and
history.

I would suggest enforcing a company policy that only trusted sites will be
allowed. Full-stop. No "unless you're using a browser that's not seen as
much action".

> As for running as a restricted user, I think most admins agree that while
> that is practical on Linux, on Windows it's largely unworkable. You'd
> spend half your time just logging-on and logging-off again and again.

And a dozen years ago, when I started writing WFTPD, "Windows is too
unstable to use as an FTP server".

Fight the evil, don't perpetuate it. Insist on applications that work
without being administrator.

Alun.
~~~~
[Please don't email posters, if a Usenet response is appropriate.] 

-- 
Texas Imperial Software   | Find us at http://www.wftpd.com or email
23921 57th Ave SE         | alun@wftpd.com.
Washington WA 98072-8661  | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.

Relevant Pages

  • Re: Are Java and JavaScript really so malicious for Windows system
    ... enforcing a company policy that Internet Explorer shall only be used ... > trusted sites would be far more effective. ... > As for running as a restricted user, I think most admins agree that while ...
    (microsoft.public.security)
  • Re: Why authentication before opening a document in document libra
    ... considers the web server to be a local server. ... Open Internet Explorer> Click Tools> Internet Options ... Windows SharePoint Services 3.0 ... Add the URL of the SharePoint site to the trusted sites list. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Are Java and JavaScript really so malicious for Windows system
    ... Alun Jones wrote: ... >>used on trusted sites would be far more effective. ... How do these browsers secure you in a way that Internet Explorer ... on Windows it's largely unworkable. ...
    (microsoft.public.security)
  • Re: cant update error (0x800B0004)
    ... Regarding your 800B0004 error -- I'm going to pass on a direct quote from Lucy at Microsoft. ... Next navigate to Trusted Sites. ... Internet Explorer> Tools> Internet Options> Security ... please post the Windows Update.log file. ...
    (microsoft.public.windowsupdate)
  • Re: Hit & miss download problems
    ... > Have you looked in Internet Explorer on the problem machine to see if ... > those sites can be "added" to the list of Trusted Sites? ... >> sending the new file to that computer over the network. ... >> of my network settings off? ...
    (microsoft.public.windowsxp.network_web)