Full Disclosure mailing list archives
Re: IE is just as safe as FireFox
From: Borja Marcos <borjam () sarenet es>
Date: Thu, 18 Nov 2004 15:47:18 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Why is it that Microsoft's code has less quality even though all code that'swritten is instantly audited? (Each line of code is checked before it's 'passed' in to the code tree.)
Design, design and design. Also, design.Writing programs isn't a simple matter of writing code and auditing it for buffer overflows. What about the lousy MIME-type handling in IE, detecting intelligently (but after declaring it harmless in the "security check") that a program disguised as an audio file could actually be an executable, and happily running it?
It is bad design. The same as ActiveX. Why are many IE security problems avoided by disabling "Active Scripting"?
There seems to be an obsession with "code" these days. And people affected by such disease forget that the code should come after a good design, and a bad design can only be fixed scaping it and starting over.
Borja. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) iD8DBQFBnLX5ULpVo4XWgJ8RAlTJAJ92yXv8C5ArhrGzsHCNXBQHyECqhQCcDoL9 LGLighoTQw5rSwV2/mMp72k= =TDnR -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- IE is just as safe as FireFox Todd Towles (Nov 11)
- Re: IE is just as safe as FireFox Danny (Nov 11)
- Re: IE is just as safe as FireFox Scott Leff (Nov 11)
- Re: IE is just as safe as FireFox Danny (Nov 12)
- Re: IE is just as safe as FireFox Frank Knobbe (Nov 11)
- Re: IE is just as safe as FireFox stilist (Nov 11)
- Re: IE is just as safe as FireFox Danny (Nov 12)
- Re: IE is just as safe as FireFox David B Harris (Nov 11)
- RE: IE is just as safe as FireFox Poof (Nov 12)
- Re: IE is just as safe as FireFox Borja Marcos (Nov 18)
- Re: IE is just as safe as FireFox Danny (Nov 12)
- Re: IE is just as safe as FireFox Scott Leff (Nov 11)
- Re: IE is just as safe as FireFox nicolas vigier (Nov 12)
- Re: IE is just as safe as FireFox Danny (Nov 12)
- Re: IE is just as safe as FireFox Danny (Nov 11)
- Re: IE is just as safe as FireFox Martin Mkrtchian (Nov 11)
- Re: IE is just as safe as FireFox nicolas vigier (Nov 12)
- RE: [in] Re: IE is just as safe as FireFox Curt Purdy (Nov 14)
- Re: [in] Re: IE is just as safe as FireFox john morris (Nov 14)
- Re: [in] Re: IE is just as safe as FireFox Rafel Ivgi, The-Insider (Nov 14)
- Re: [in] Re: IE is just as safe as FireFox Ag. System Administrator (Nov 14)
- Re: [in] Re: IE is just as safe as FireFox Barrie Dempster (Nov 14)
- RE: [in] Re: IE is just as safe as FireFox Curt Purdy (Nov 14)