Re: [CGUYS] Will Adobe Eclipse Microsoft?

2010-01-16 Thread John Duncan Yoyo
On Sat, Jan 16, 2010 at 2:09 AM, t.piwowar t...@tjpa.com wrote:

 On Jan 15, 2010, at 10:55 PM, John Duncan Yoyo wrote:

 Turn off Javascript in Adobe.


 Or just don't turn on the computer at all.

 Yeah that will work.  It turns the computer into furniture but it will
work.

Javascript can be dangerous enough.  But Javascript where you don't expect
it is insane.  It is built into Adobe Reader and hardly anyone uses it let
alone knows it is there.  This makes pdf files dangerous viral vectors
unless you turn off javascript in reader.

Your Mac is probably safe since you probably use Preview to read pdfs.

The article is an older one from last spring but there have been exploits
using a similar technique since.  The article also tells you how to turn it
off.


http://www.wizcrafts.net/blogs/2009/04/new_zeroday_javescript_exploit_targets_adobe.html


-- 
John Duncan Yoyo
---o)


*
**  List info, subscription management, list rules, archives, privacy  **
**  policy, calmness, a member map, and more at http://www.cguys.org/  **
*


[CGUYS] Will Adobe Eclipse Microsoft?

2010-01-15 Thread tjpa

http://rcpmag.com/articles/2010/01/13/adobe-eclipsing-microsoft-as-patch-concern.aspx

After a solid year of security issues, Adobe's product security and  
secure product development practices are being seriously questioned,  
said Andrew Storms, director of security at nCircle. It's ironic to  
consider that we may have reached the point where Microsoft Office  
documents are now more secure than [Adobe] PDF documents.



*
**  List info, subscription management, list rules, archives, privacy  **
**  policy, calmness, a member map, and more at http://www.cguys.org/  **
*


Re: [CGUYS] Will Adobe Eclipse Microsoft?

2010-01-15 Thread John Duncan Yoyo
On Fri, Jan 15, 2010 at 7:51 PM, tjpa t...@tjpa.com wrote:


 http://rcpmag.com/articles/2010/01/13/adobe-eclipsing-microsoft-as-patch-concern.aspx

 After a solid year of security issues, Adobe's product security and secure
 product development practices are being seriously questioned, said Andrew
 Storms, director of security at nCircle. It's ironic to consider that we
 may have reached the point where Microsoft Office documents are now more
 secure than [Adobe] PDF documents.


 Turn off Javascript in Adobe.

-- 
John Duncan Yoyo
---o)


*
**  List info, subscription management, list rules, archives, privacy  **
**  policy, calmness, a member map, and more at http://www.cguys.org/  **
*


Re: [CGUYS] Will Adobe Eclipse Microsoft?

2010-01-15 Thread t.piwowar

On Jan 15, 2010, at 10:55 PM, John Duncan Yoyo wrote:

Turn off Javascript in Adobe.


Or just don't turn on the computer at all.


*
**  List info, subscription management, list rules, archives, privacy  **
**  policy, calmness, a member map, and more at http://www.cguys.org/  **
*