At 07:49 AM 1/31/2003, you wrote:
I have a hard time feeling real outraged on behalf of the kind of users you are describing. Anyone who 1) visits the sort of sites where Xupiter is offered, and 2) has their IE security settings low, and 3) is in the habit of impatiently clicking "yes" to any prompt that comes their way ... well, that's like driving drunk while talking on a cell phone.Yes, there is ActiveX warning message for a driveby download, but I think it is classic "blaming the victim" to call users who click the yes button as "stupid". Most computer users today just see a computer as a tool and they are not programmers. Vendors like Xupiter and Gator are working the percentages by relying on users to not read the warning boxes carefully enough and hope they hit "Yes" button to make the boxes go away as quick as possible.
To protect these folks against this kind of scumware, perhaps we need the digital equivalent of air bags. When are antivirus products going to add detection for Xupiter et al?
Brian
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
