http://www.schneier.com/blog/archives/2006/07/load_activex_co.html

interesting story bout what Microsoft are intending on doing , any thoughts on this?
another bad Security Hole

quote:

---

Originally posted by Brian S
I think it is important to view this for what it is: a solution to a real problem (experienced by beta testers and corporate customers alike in Vista and pre-Vista standard user scenarios). This solution also carries the opportunity to be exploited because it is designed to circumvent a previously implemented security control.

Does it make sense for MS to release a product that breaks business apps? Of course not. The security purists will argue that the enabling of a feature to "degrade" security is A Bad Thing (TM), but in the end the question really is: If only business and advanced user SKUs (Business, Enterprise, Ultimate) even have this option and those are the most likely to have the technical know-how to use it properly, while leaving the "normal home user" with UAC as default, did they hit a reasonable compromise?

I suppose only time will tell.

---