Re: Web Site Hacks

[Steve Gibbons <steve () wyrm AZTech Net>]

> Hmm, Java/ActiveX are browser-side things too, so they can be used (directly)
> to hack browsers only, not web sites (although there could be some indirect
> compromises ;)

The possiblity of indirect compromises has been addressed before (see CA-96.05)
For some behind-the-scenes info on the CERT advisory, see:
http://www.aztech.net/~steve/java/

Despite picking nits with a particular implementation, I _very_much_ prefer 
the Java security model compard to MS's.

My $0.02...

--
Steve