Robin
Cast Member
Posts: 940
Registered: Aug 2002
|
Posted
08-30-02 04:21 PM
There's been some talk about Javascript and Active X needing to been enabled to access the BFC.
Here's a quote from Trend Micro's site:
"The danger from these codes varies greatly. At this point, malicious Java applets are normally more of a nuisance than a real threat to data - because, by design, Java applets should not be able to read, write, or delete files.
Examples of pranks that malicious Java applets have caused include: scores of browser windows opening unnecessarily or the volume of a speaker increasing suddenly.
This relatively benign nature, however, may change in time, as Java developers expand the capabilities of the language. (In 1999 Microsoft released a corrective patch for a vulnerability in Internet Explorer’s virtual machine that gave specially designed malicious Java applets file-handling capabilities.)
ActiveX, however, is another matter. These controls can be used within a variety of MS applications, aside from Internet Explorer, and have control over the computer’s operating system. An ActiveX component could therefore be made to perform a wide variety of malicious things from wiping out data, to damaging the operating system, to stealing passwords.
Read the full article, and make your own decision on what risks are acceptable to you.
http://www.trendmicro.com/pc-cillin...nt_security.htm
I toss my cookies for Disney.
I wonder what inspired this new Disney T-shirt? "I'm right. You're wrong. Any Questions?"
|
