Reply to thread

Message

<blockquote data-quote="Michael Morris" data-source="post: 749104" data-attributes="member: 87">I'm getting a little testy to, so I will also apologize.I can understand your objection, particularly if we were talking about Active X or true JAVA.&nbsp;&nbsp; The former specifically is extremely unsecure - in college I played a prank on several professors by exploiting a whole in it to do mean things to their systems in a *proof* of concept...JAVA has more limited access to the system's registerstries and is not *as* dangerous, but there are still security holes in the way IE handles it that can be exploited to attack a system.JAVAscript also had holes in the version MSIE 4.x used.&nbsp; These have largely been patched, and the commands that allowed such attacks where never officially part of the scripting routine.&nbsp; As of the HTML 4.0 standards adoption (which is featured in MSIE 5.x and later and all &quot;Gecko&quot; browsers) the scripts where standardized.&nbsp; There is no danger anymore (At least with basic JAVAscript.&nbsp; Microsoft still uses unauthorized extensions to JAVA that are security breaches waiting to happen.&nbsp; But this script isn't written for MSIE in particular, and would have to be to do that attack).This script is NOT dangerous.&nbsp; I have posted it to the META forums as a text file - examine it if you like - trust me there is nothing it can do to your system at all.&nbsp; I didn't even write it - it's the canned script provided with Macromedia Fireworks, and it is used on WotC's site - It's the same blasted script WotC uses!!By the way SIGIL, by being on these boards you're running a JAVAscript.&nbsp; You do know that don't you??</blockquote>

[QUOTE="Michael Morris, post: 749104, member: 87"] I'm getting a little testy to, so I will also apologize. I can understand your objection, [b]particularly[/b] if we were talking about Active X or true JAVA. The former specifically is [b]extremely[/b] unsecure - in college I played a prank on several professors by exploiting a whole in it to do mean things to their systems in a *proof* of concept... JAVA has more limited access to the system's registerstries and is not *as* dangerous, but there are still security holes in the way IE handles it that can be exploited to attack a system. JAVAscript also had holes in the version MSIE 4.x used. These have largely been patched, and the commands that allowed such attacks where never officially part of the scripting routine. As of the HTML 4.0 standards adoption (which is featured in MSIE 5.x and later and all "Gecko" browsers) the scripts where standardized. There is no danger anymore (At least with basic JAVAscript. Microsoft still uses unauthorized extensions to JAVA that are security breaches waiting to happen. But this script isn't written for MSIE in particular, and would have to be to do that attack). This script is NOT dangerous. I have posted it to the META forums as a text file - examine it if you like - trust me there is nothing it can do to your system at all. I didn't even write it - it's the canned script provided with [i]Macromedia Fireworks[/i], and it is used on WotC's site - [b]It's the same blasted script WotC uses!![/b] By the way SIGIL, by being on these boards you're running a JAVAscript. You do know that don't you?? [/QUOTE]

Verification