[ilug-cal] Security Hole in Netscape Communicator

[Mr. Suman Nandy]

friends,       You must have heard of LiveConnect!, a new technology from the Netscape group to integrate between the Javascript and Java. Great ! isn't it ? But the downside is that it is possible to run almost any kind of java program, and hence when a user is viewing the contents of a web page, it is possible to extract the directory structure of his computer or to read a particular file by appropiate programming ( I, myself have been able to do it ).     The only solution seems to be to disable Java which is an impossible thought an no Applet will run then. Internet  Explorer, however does not seem to support this feature, although some extensions like playing movie with Javascript can be very effectively used.   SUGGEST A SOLUTION BY REVIEWING THE SOURCE CODE OF Mozilla! AT HTTP://WWW.NETSCAPE.COM.   Thanks,   suman