Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: Active X exploit.
From: erik () NOCOM SE (Erik Tornstam)
Date: Thu, 28 Aug 1997 09:05:31 +0200


This is a cryptographically signed message in MIME format.

--------------msEF0EB0E1C3ADF98090C1405D
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Paul Leach wrote:

That's more secure than what I buy at the store.

When sir, was the last time you walked into a store and every time you
looked at a package it automatically installed itself and ran ?

The actual answer: the last time I bought a CD-ROM based package. Take a
look at "autorun.inf" on a CD-ROM.

ActiveX controls from a software vendor only automatically run if you
have previously stated that you are willing to automatically run any
signed code from that software vendor.

Paul

People who dislikes things executing without permision (smart people)
turns autorun off.

To turn autorun of in Win95

          1.  Right-click on the My Computer icon.
          2.  Choose the Device Manager tab.
          3.  Open the CD-ROM branch, and select the entry for your
CD-ROM drive.
          4.  Click Properties, and then choose the Settings tab.
          5.  Turn off the Auto insert notification option.
          6.  Click OK, and then OK again. You'll have to restart
Windows for this change to take effect.

/Erik
--------------msEF0EB0E1C3ADF98090C1405D
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------msEF0EB0E1C3ADF98090C1405D--



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault