Warp wrote:
> John VanSickle <evi### [at] hotmailcom> wrote:
>> Simply never writing macros to normal.dot would have stopped the 
>> propagation of many viruses, and depriving macros of the ability to 
>> disable menu commands would have helped, too.
> 
>   It's not the first time when MS's concept of fixing a security hole is
> to either ignore it (by argumenting it's not a problem) or going completely
> overboard, instead of actually fixing the problem itself.

Aside from the recurring buffer overruns bugs (it seems like one of 
those pop up every month[1]), every security hole appears to involve a 
feature that MS added for its own benefit, and not for the user's.

IE is a good example of this.  Frankly, everything that isn't directly 
related to displaying content formatted in HTML should be relegated to 
plug-ins that the user can shut off at will.  That includes automatic 
download, install, JavaCurse^H^H^H^H^HScript, and so on.

>   Somehow it gives the impression of a beginner and proud-of-itself
> programmer who is given a bug report. He either is too proud to admit
> the problem, or can't imagine a better solution to it than to disable
> half of the functionality of the program. You know, like those cases you
> can constantly read at the daily WTF.

Disabling half of the functionality in IE would be a pretty good idea.

Regards,
John

Post a reply to this message