full-disclosure - windowsupdate

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <008901c367e5$cb043c50$6997fea9@bitchin>
From: mfratto at nwc.com (Mike Fratto)
Subject: windowsupdate

> [Observation stolen from nanog.]
> 
>    Windows Update uses ActiveX Controls and active scripting 
> to display
>    content correctly and to determine which updates apply to 
> your computer.
---snip---
> What the hell are you people thinking?!

Try configuring the trusted zone in IE, set your preferences there, and then
place what ever domain names in there that you trust. So then it works.
Tighten down the Internet zone to disable activeX and whatever else you
don't want to run.

I don't use IE except when I don't have any other choice, so I try to make
it as tight as possible when I do need it.