vicks
@anonymouse.org
| reply to Cudni
Re: Firefox 3 honors Windows Security Zones...
said by Cudni  :are you sure? yes I'm sure. All downloads in Firefox 2 are NOT marked with an alternated data stream (Windows Security Zones), so when the user clicks on an exe saved by Firefox 2, no warning is received. This feature is just added only with Firefox 3.0. IE6 has this feature since WinXP SP2  Mozilla is in late!!!!!!!!!!!!!!!!!!!!!!! |
|
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire | it is good to be sure, what happens when you click to download .exe in FF 2 ?
Cudni |
|
vicks
@anonymouse.org
| said by Cudni :it is good to be sure, what happens when you click to download .exe in FF 2 ? You didn't understand what is Windows Security Zone.
Try these steps:
1. download an exe with Firefox 2
2. save to disk
3. run it
result: when you run it, no warning is shown because the file has not marked by an alternate data stream
Since XP SP2, Internet Explorer 6 marks all downloaded files by an alternate data stream which tells it comes from Internet zone and so Windows shows this warning:
 |
|
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
| said by vicks :You didn't understand what is Windows Security Zone. Try these steps: 1. download an exe with Firefox 2 2. save to disk 3. run it result: when you run it, no warning is shown because the file has not marked by an alternate data stream I understood perfectly which is the part you missed
Cudni
--
"Mercifully, he hit him with the soft end of the pistol."
Help yourself so God can help you.
Microsoft MVP, 2006 - 2008 |
|
Mele20
Premium
join:2001-06-05
Hilo, HI
| reply to vicks
said by vicks :said by Cudni :it is good to be sure, what happens when you click to download .exe in FF 2 ? You didn't understand what is Windows Security Zone. Try these steps: 1. download an exe with Firefox 2 2. save to disk 3. run it result: when you run it, no warning is shown because the file has not marked by an alternate data stream Since XP SP2, Internet Explorer 6 marks all downloaded files by an alternate data stream which tells it comes from Internet zone and so Windows shows this warning: What about those of us who have a Shell extension that removes ALL Alternate Data Streams? I would never allow any ADS on any file. I immediately right click check any file I download for ADS and the extension removes the ADS. Viruses and other crap can hide in ADS. Why would Microsoft be so stupid as to use a known hiding place for malware to mark a file? UGH. (I don't know if the Shell extension works on Vista. I think I will try and see. I have downloaded almost nothing to Vista. I just grab from the network what I need).
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason |
|
