full-disclosure - windowsupdate

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: hobbit at avian.org (*Hobbit*)
Subject: windowsupdate

[Observation stolen from nanog.]

   Windows Update uses ActiveX Controls and active scripting to display
   content correctly and to determine which updates apply to your computer.

   To view and download updates for your computer, your Internet Explorer
   security settings must meet the following requirements:
     * Security must be set to medium or lower
     * Active scripting must be set to enabled
     * The download and initialization of ActiveX Controls must be set to
       enabled

What the hell are you people thinking?!

_H*