From: Paul Kurczaba (paulmyipis.com)
Date: Fri Apr 30 2004 - 11:01:58 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Allowing ActiveX, Javascript and scripting can allow spyware and possibly viruses to get on the user's PC. Service Packs and patches won't prevent this from happening. Most users know *very* little about computer security, therefore they click on "yes" for every window that pops up. This causes a problem when it comes to ActiveX dialogs (and possibly JavaScript). Once they click "yes", the ActiveX applet can do whatever it pleases. If I were you, I would disable ActiveX, JavaScript, and Scripting in IE. Also, I believe that if a user doesn't have Administrative privileges, they can't download ActiveX components at all (which is a plus). That would be another thing to look into. Also, if you have any gateway enforcement software/hardware, you might be able to configure it to only allow ActiveX and JavaScript form certain "allowed" domains that you know don't have spyware (note that it will not filter TLS/SSL).

-Paul Kurczaba

> Hello,
>
> I'm not sure if my first email went thru or it's stuck somewhere because of
> the wrong email address. Anyway, we're currently blocking ActiveX,
> JavaScript and active scripting in IE. It has been working ok for us, but
> we heard a lots of complains because the users couldn't get to the sites
> that require ActiveX turn on (most of commercial sites). So my questions
> are
>
> What are the risks of turn everything on in IE? Is staying current with
> service packs help? Is there any work around if we decide to keep
> ActiveX...off? Any suggestions are appreciated.
>
> AP
>
> p.s: And I don't want to go with Mozilla browser....
>
> _________________________________________________________________
> Stop worrying about overloading your inbox - get MSN Hotmail Extra Storage!
> http://join.msn.com/?pgmarket=en-us&page=hotmail/es2&ST=1/go/onm00200362ave/direct/01/
>
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------
>

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]