mailing list archives
Re: Re: shell:windows
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Tue, 13 Jul 2004 10:14:47 +1200
No - there are numerous ways to force input into places like the address
bar. As someone else already stated, for this to work you have to be
able to push it into that area. There are numerous ways to do this and
for a person with a little more time on their hands, finding one that
works properly should not be difficult.
Stop thinking about this as being a one-dimensional issue. Security
issues very rarely are that one-dimensional.
Hey guys -- stop picking on Larry.
If Microsoft gets to think one dimensionally about security, why
shouldn't eWeek's "Security Center Editor" be able to do the same?
Full-Disclosure - We believe in it.