MSN7 security holes? about Activities & Games downloading control - Printable Version
-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Skype & Live Messenger (/forumdisplay.php?fid=10)
+----- Thread: MSN7 security holes? about Activities & Games downloading control (/showthread.php?tid=34550)
MSN7 security holes? about Activities & Games downloading control by ChrisTorng on 11-18-2004 at 06:37 AM
I found that MSN Messenger 7.0.0425, using Activities & Games (like File Sharing), will not ask for download and install ActiveX control... It just download and install automatically... without any warning or confirming... I think MSN Messenger 6 had it... If I use a 3rd party Activities & Games, to invitate anyone, and he accept, then I can install any control to his computer? I can use the normal MSN games name and html page (with an extra control), then others just think he is playing a normal MSN game... without knowning the hidden control just installed...
RE: MSN7 security holes? about Activities & Games downloading control by Underlord on 11-18-2004 at 06:41 AM
The other person also have to have the references to the third party games, i believe.
RE: MSN7 security holes? about Activities & Games downloading control by ChrisTorng on 11-19-2004 at 01:50 AM
Ok... understand... But why Microsoft have the right to skip the "should have" security warning? Microsoft can silently install other ones with other ways? I think that any installation should ask for user's confirmation. I can't reject those ActiveX games and just accept jscript or flash ones. And then if I use games.mess.be, then they can install any control in my computer too.