full-disclosure - IE is just as safe as FireFox

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: windenntw at gmail.com (Antonio Vargas)
Subject: IE is just as safe as FireFox

On 15/11/2004, at 22:50, Stuart Fox ((DSL AK)) wrote:

>
> > Can the Firefox settings be controlled centrally?
> >Yes, and more flexible than IE versions zoo at user computers. 
> Download
> >a Firefox ZIP (not Firefox_Setup_1.0.exe but Firefox 1.0.zip), unpack 
> it
> >to R/O share on file server, edit JS configuration files in
> >.\defaults\pref and .\greprefs, then create a shortcut to firefox.exe 
> on
> > user desktops. To change FF settings, edit JS configs again. Voila!
>
> Can the executable reside on the workstation with the settings stored 
> on the network?? In an ideal world, you'd be able to control the 
> settings via Group Policy (which is how you do it with IE).? I'm not 
> sure your method is any more flexible than using Group Policy to be 
> honest.
>

Thats exactly what you DON'T want. If you store the .exe on the client, 
then they can overwrite it with a virus and gain control more easily. 
Sharing read-only from a file server is the real solution.