On Tue, 27 Nov 2001 18:34:00 GMT, Patrick Gallagher
<[EMAIL PROTECTED]> wrote:
>ActiveX is the problem - and actually, there are a lot more Netscape 
>style plugins on the internet than ActiveX.

I'm not sure about this.  Now that unfortunately IE doesn't support
plugins anymore and given current market conditions, I think most
serious plugin developers will develop ActiveX controls, use one of
the commonly installed plugins like Flash instead, or move away from
any kind of plugin/ActiveX content.

I'm sure that there are more ActiveX controls than Netscape plugins, I
don't know that they are all available for free download on the
internet if that's what you mean.

>The main problem is the ActiveX architecture allows the applets too much 
>access to your system - for instance, there was one applet that ejected 
>your CD-ROM, popped up a message saying something along the lines of 
>"here's your coffee holder" and shut down your computer. Netscape 
>plugins were limited to browser functionality, they were never given 
>root access to your computer's resources - same with Java.  That being 
>said, ActiveX could do some really cool things, and having the 
>functionality locally is a good thing, but allowing it on the internet 
>and access to it through a web browser was a really, really dumb thing 
>to do.

I could write a Netscape plugin that ejected your CD-ROM, popped up a
message, and shutdown your computer.  If I could convince you to
install it, it would work just fine.  Netscape plugins are and never
have been limited to "browser functionality".  Plugins are NOT the
same as Java.

I don't think it was a dumb thing to do.  But you have to trust the
ActiveX/plugin completely, IT can do all that YOU can do on your
computer.  This makes them unacceptable for many jobs that they are
better able to do than a web browser is alone.  I would not trust many
internationally known companies to install plugins on my computer
(like my bank).  Before I install a plugin I need to deicde if I trust
the provider to have access to my system and if it provides a service
I want.  Novice or expert user, it's a matter of trust.  

Security wise Java is much nicer especially in recent versions because
it is almost as powerful as native code while it has a built in
security system with fine grained permissions.  I can grant Java
applets the ability to access files in a certain directory only.

Chris Hill
[EMAIL PROTECTED]

Reply via email to