OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mark Curphey (markcurphey.com)
Date: Wed Oct 24 2001 - 09:25:36 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Not true !

    http://linuxtoday.com/news_story.php3?ltsn=2001-07-10-003-20-PR-KE-MS

    -----Original Message-----
    From: Léonard BUTTAY [mailto:lbuttaywanadoo.fr]
    Sent: Wednesday, October 24, 2001 12:34 AM
    To: markcurphey.com; Jeremiah Grossman
    Cc: Bill Pennington; Dennis Groves; Mark Curphey;
    webappsecsecurityfocus.com
    Subject: Re: Slash, Jetspeed...

    The plugin programming scheme was first design by Netscape :
    http://developer.netscape.com/docs/manuals/communicator/plugin/

    Plugins have the same restrictons than a standalone app = no restriction :
    they can read/write file anywhere, access the registry, open network
    connexion ...

    I don't have any experience with ActiveX, since it works only on MS box.

    le 23/10/01 20:58, Mark Curphey (<mcurpheyonebox.com>) a écrit :

    > I have never seen any good documentation about plug-ins and exactly what
    > they can and cant do.....flash is now an active-x control isnt it ?
    >
    >