Re: [Full-Disclosure] .hta virus analysys

[Scott Taylor <security@303underground.com>]

On Thu, 2003-11-20 at 11:44, Maxime Ducharme wrote:
> More info on Microsoft's website :
> http://msdn.microsoft.com/library/default.asp?url=/workshop/author/hta/overview/htaoverview.asp
> 
> (URL may be wrapped)
> 
> Ciao
> 
> ---------------------------------------------------------------
>   Maxime Ducharme
>   Administrateur reseau, Programmeur
>   Pandore-Design [http://www.pandore-design.com]

Wow, Microsoft just has no end to the entertainment. Thats a great
article. "HTAs...are trusted and display only the menus, icons,
toolbars, and title bars the Web Developer creates...all the power of
IE...without enforcing the strict security model..."

When did IE, or Outlook, or Windows ever enforce a strict security
model... or even a loose one?  Well, good thing they offer solutions to
help developers get around such security inconveniences. 

I guess they really do have the market cornered on incompetent
programming practices.

--
Scott Taylor - <security@303underground.com> 

 ohshit my comp is smoking
 i have to go
<-- KillerSpaz has quit (Remote closed the connection)
 kids, here's why you shouldn't overclock

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html