That wouldn't be specific to IE though that would be the case for ANY
browser component used, so you point is invalid.

----- Original Message ----- 
From: "Donnie Newlove" <[email protected]>
To: "Half-Life dedicated Linux server mailing list" 
<[email protected]>
Sent: Thursday, June 04, 2009 10:27 PM
Subject: Re: [hlds_linux] New browser engine support for steam?


Indeed, and what's up with Steams constant I/O usage even when it's
supposed to be in idle?

My biggest beef with IE in Steam is security. We all know IE is not
know for it's high security and it continue to be the most targeted
browser and favorite entry point of malware. Using IE made sense when
we just had the store using it. It also made sense in the community
tab. But using IE for rendering servers MOTD screens is crazy for me
since they can be pointed to anything and the in-game browser that can
also be navigated to any page.

It's just a question of time before things go to shit. What if some
clever hacker, or even scriptkiddie, decides next time there's a major
IE exploit available, could be for IE6, IE7, IE8 or all of them, it
doesn't matter, to set up a bunch of TF2 server with stolen server
community names, hacked player count and point the MOTD to a site with
the exploit code and payload? Huh? That would just be great publicity,
imagine all the stolen Steam logins, paypal accounts and credit card
numbers.


================================================
This e.mail is private and confidential between Multiplay (UK) Ltd. and the 
person or entity to whom it is addressed. In the event of misdirection, the 
recipient is prohibited from using, copying, printing or otherwise 
disseminating it or any information contained in it. 

In the event of misdirection, illegible or incomplete transmission please 
telephone +44 845 868 1337
or return the E.mail to [email protected].


_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Reply via email to