Mozilla 1.4 Alpha To Have ActiveX Support
quakeslut writes "According to the newly posted Mozilla Staff Minutes, Moz is set to have initial ActiveX support for the next alpha. ActiveX... be afraid... be very afraid."
← Back to Stories (view on slashdot.org)
And how about the buffer overrun in programs signed by Microsoft? See http://slashdot.org/articles/02/11/21/1317229.shtm l?tid=172
Signing doesn't solve the problem because there are buggy programs that are signed. So anybody can distribute them and you will happily run it. And revocation doesn't work because nobody really does it.
The only reasonable solution is to have an on-line repository of known checksums. And any time you'd need to run something unknown, you'd check the MD5 sum of the program against the database.
It could be used instead of rpm -Va as well. You wouldn't need to trust the (potential modified) rpm database on your disk, you'd check against central database.
Anybody upto building such a thing?