Full Disclosure mailing list archives

RE: Bill Gates blames the victim


From: "Richard M. Smith" <rms () computerbytesman com>
Date: Wed, 3 Sep 2003 15:55:17 -0400

Hi Robert,

   >>> As long as the patch is ahead of the virus, where
   >>> does the accountability really fall?

I'm curious about one thing.  How is the typical home PC user who runs
Microsoft Office suppose to learn that they now need to download a patch
to fix this latest critical security hole in Microsoft Word:

   http://www.microsoft.com/technet/security/bulletin/MS03-035.asp
   Flaw in Microsoft Word Could Enable Macros to Run Automatically
(827653)
   Originally posted: September 03, 2003

BTW, I tried downloading all of the security patches for my copy of
Office XP the other day but couldn't.  The update procedure requires the
original Office XP CDs which are 150 miles away at my other house.

For 3 or 4 years now, I've been asking Microsoft for a simple option in
Word to turn off Word Macros since I don't use them.  If this option
existed, these ongoing security holes with Word Macros wouldn't affect
me.  Any idea why Microsoft refuses to implement this rather obvious and
useful security feature?

Richard

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: