|
Posted by Ben C on September 6, 2008, 6:35 pm
Please log in for more thread options
> Guy Macon <http://www.GuyMacon.com/> wrote:
>
>
>> Serious Security Flaw in Google Chrome:
>>
>> http://www.readwriteweb.com/archives/security_flaw_in_google_chrome.php
>
> "An attacker could easily trick users into launching an executable Java
> file by combining a flaw in WebKit with a known Java bug and some smart
> social engineering."
>
> Old news [1], and certainly not serious. The most serious security flaw
> are all those people *still* working with Windows with Administrator
> rights. Some because they think they are "power users" (the correct term
> is ignorant lusers), and some because an aforementioned "power user" has
> configured their OS.
>
>
> [1] I just explained to someone that when developing software, after some
> time you freeze the code base. And if the release date is fixed (I am sure
> that was the case here), it's just released, even if there is a very minor
> security issue (which this is, anyone calling this serious is either
> clueless, or trying to get more traffic)
Actually I think it was that "carpet bombing" issue that Microsoft were
having a bit of fun with in the press when it first appeared in Safari.
Apple had just rather sneakily installed Safari on a few million PCs by
bundling it into the small print of an iTunes update.
Soon after that when the "carpet bombing" problem was reported,
Microsoft responded by announcing serious-sounding warnings and
recommending people not to use Safari (which was brazen coming from
them, even for them).
|