| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
From serenade to security hole? | |
|
||
| Time: 12:56 EST/17:56 GMT | News Source: CNET | Posted By: Robert Stein | ||
|
The vulnerability as described by security experts illustrates the classic trade-off between security and functionality. In giving its media player the ability to read scripts and to open Web pages, Microsoft outlines a wide array of potential uses. "Inserting URLs into your digital media files and embedding the Windows Media Player ActiveX control in a Web page results in a powerful, synchronized presentation that is organized and convenient for your audience," reads a Microsoft Web page on the topic. "By using the ActiveX control in a script, you can create a set of framed Web pages. One frame can contain the embedded ActiveX control for playing the audio or video lecture, while another frame displays the synchronized URLs encountered in the digital media stream. The URLs can be links to additional study tools, diagrams, lecture notes, or a quiz available on the Web." | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 150 Last | Next |
The time now is
6:04:06 PM
ET.
Any comment problems? E-mail us |
| #1 By 135 (209.180.28.6) at 2/28/2002 1:52:22 PM |
|
I think part of it is that we don't treat people who send out these viruses and worms with the proper criminal respect they deserve.
If you shoot someone with that Smith and Wesson gun, chances are you'll get charged with murder and sent up the river. Using the excuse "It was an accident, I just wanted to see what it could do." doesn't cut it. |
| #2 By 1124 (165.170.128.65) at 2/28/2002 4:22:44 PM |
|
It seems Apache has the same problem
http://news.com.com/2100-1001-847092.html?tag=cd_mh |
| #3 By 135 (209.180.28.6) at 2/28/2002 5:26:13 PM |
|
#8 - Interesting. That's good news. Basically that means if you were to interrupt some critical function, like say a Hospitals computer system... you'd be in trouble.
That'll put some teeth into the law. |
| #4 By 1124 (165.170.128.65) at 3/1/2002 7:56:46 AM |
|
#9
Here is a quote from the article: "Security vs. functionality The vulnerability as described by security experts illustrates the classic trade-off between security and functionality. In giving its media player the ability to read scripts and to open Web pages, Microsoft outlines a wide array of potential uses." Thus, the problem is caused by Microsoft giving the media player the ability to read scripts. Quote from the article I pointed to: "A flaw in the common open-source scripting language PHP could allow attackers to crash or compromise a hefty fraction of the nine million servers running the open-source Web software Apache, as well as other Web servers. " Conclusion: Both systems have a scripting vulnerability. ( Yes one script engine is build in why the other is a third party product, but most people use PHP in Apache so the point is a wash) |
|
Write Comment
Return to News |
Displaying 1 through 25 of 150 Last | Next |
The time now is
6:04:06 PM
ET.
Any comment problems? E-mail us |
