VIRUS ALERT

[Roger Heflin]

On Thu, 20 Apr 2000, Swayze wrote:

> is that what that unsigned ActiveX control stuff was about. it got deleted without any more than necessary.
> byE
> Mike
> Swayze
> mswayze at truswood.com
> kswayze at bellsouth.net
> 

Signed means nothing.

ALot of the properly signed activex have really really nasty features
than can be misused to break into a machine, so even the controls
being signed means nothing.   Microsoft just signs that there is
nothing obviously bad in the code, not whether the control as
implemented can be easily misused, so you should suspect all activex
controls no matter if they are signed or not.   

You might look in the comp.risks newsgroup or archives, and there is
alot of detail on several of the large computer vendors signed activex
controls having holes that canbe easily misused to get control of a
machine with that control installed.

		Roger

----------------------------------------------------------------------------
To unsubscribe from diy_efi, send "unsubscribe diy_efi" (without the quotes)
in the body of a message (not the subject) to majordomo at lists.diy-efi.org