[EMAIL PROTECTED] (Chris Hill) wrote in
[EMAIL PROTECTED]">news:[EMAIL PROTECTED], on 27 Nov 2001: 
>>They are as secure as fort knox compared to Active X
>>
> 
> Please explain

I've never seen a malicious Netscape plugin (even when Netscape had 80%+ 
marketshare).  I've seen dozens of malicious active X scripts.  IE in 
general is too insecure and gives out too much information about my 
system.  For instance, BrowserSpy: http://www.gemal.dk/browserspy/

I don't think any web site needs to know anything about my Direct X 
version.  This should not be made available through my browser.  I don't 
think anything involving the MS AFC should be available via my browser.  

Component information: I don't like how it's possible to see what 
version of the help engine I have installed, or what version of Media 
player is available.  A new exploit was just found involving media 
player, and this lets people target me for attack.

Java and Netscape's plugins don't get access to the rest of the system, 
in general.  I remember Heat.net's plugin installer was a Java applet, 
before it could do anything I was prompted a huge security alert saying 
"Install software on machine - HIGH RISK".  I don't get that secure 
feeling with IE.  IE is just too leaky for my tastes

-- 
ICQ: N/A (temporarily)
AIM: FlyersR1 9
email: [EMAIL PROTECTED]
_ = m

Reply via email to