Tuesday, February 07, 2012
Register  Login
  Our sponsors   
  Users currently online   
Membership Membership:
Latest New User Latest: kevin
New Today New Today: 0
New Yesterday New Yesterday: 0
User Count Overall: 56

People Online People Online:
Visitors Visitors: 7
Members Members: 0
Total Total: 7

Online Now Online Now:
Periwinkle Communications
Viruswarn banner

Welcome to the Viruswarning forums.  All your original content has been ported to the new forums as  well as new content and additional opportunities to interact with the authors of Viruswarn.com.  You can always access old content at www.leedrake.com/forum .  You may find some formatting was lost in the conversion and the older versions of the posts to be more readable....

But at least it's all here.

Enjoy!

  Viruswarn Forums
Subject: New Tactics to Force Active Content to Run

You are not authorized to post a reply.   
Author Messages
David Gray
Posts:22

11/17/2005 8:02 PM  
What Is It? This is a heads up about a new Web programming tactic that has a significant potential for abuse. Quite a while ago, I began noticing occasional Web pages that would cause the browser to shut down unless you allowed the embedded ActiveX control to run. Last week, my wife, Janet, told me that, while she was reading a Web page, the browser suddenly replaced it with a "page not found" error report. Two days ago, the same thing happened to me, while I was reading an article on the Windows ITPro Web site. It seems that some clever Web developer has figured out how to force you to run his ActiveX control if you want to read his page. What Should I Do? The first thing to do is evaluate the risk. As is usually the case, there are legitimate and safe uses for ActiveX content. For example, Adobe PDF (Acrobat) documents are displayed in Internet Explorer with the help of an ActiveX plug-in. If the publisher of the site is a reputable company, their ActiveX content is probably annoying but safe. Sites that are unknown to you, especially brand new ones, present a higher risk. If you want to view the page, you have two options
  • Allow the ActiveX content to run. Do this only if you trust the site sponsor, and are confident that your browser has not been hijacked.
    • Use your browser's Back button to return to the page.
    • When prompted for permission to run the ActiveX control (See figure below., click Yes.
  • Display the page in an alternative browser. If you are uncomfortable with the first option, this one is probably safe.
    • Any such page will use browser sniffing code, written in JavaScript, to identify your browser, which it must do, in order to know whether the browser supports ActiveX content.
    • I keep copies of both Netscape and FireFox installed for this purpose, among others.
Of course, you may have a third option, which is to boycott the site. However, if you need the information for research, as I did, this may not be realistic. This concludes this VirusWarn notice. David Gray, Chief Wizard WizardWrx, formerly P6 Consulting V: +1 (940) 374-3177 TZ: USA Central, GMT -6 E: mailto:dagray@p6c.com W: http://www.wizardwrx.com 121 Green Elm Road Wizard Wells, TX 76458-3317 USA Tell me what you need, and I’ll conjure it.
You are not authorized to post a reply.
Forums > Viruswarning Forum > Viruswarning archive > New Tactics to Force Active Content to Run



ActiveForums 3.6
  Register or Login


Forgot Password ?
Copyright 2006 by OS-Cubed, Inc.   Terms Of Use  Privacy Statement