Re: Email horror!



Art wrote:
I hope you're not limiting "active content" scope to just
activex, since it includes javascript and Java as well. You must use
Custom settings and disable all of these in the Internet Zone ... or
set certain ones to prompt (warn) as some knowledgeable users do.
But the prompting might drive you nuts :) And there are several other
settings in IE related to security which I won't go into here,
especially since I don't recommend using IE.

I wasn't very clear. I disable *all* active content: Javascript, ActiveX, the whole nine yards. I disable every option that IE allows you to disable under Security and set those that I can't to prompt (or what have you). Whew. =)

Two of the many things that have been "intrinsically wrong" with IE
over the years have been:

1. The default Medium security setting of the Internet Zone is highly
dangerous (I know it still is since I tested it recently on a goat
machine).

The defaults *are* garbage and, as I've said before, I don't stick with them at all.

2. MS has been notoriously slow in fixing known vulnerabilities.

I'm really not a fan of Microsoft. I believe Windows and all its bundled software are basically easy to use (a good thing) but that the price for MS's version of easy is too high--both up front and in nice little ways later.

If you truly keep all active content disabled or have items set to
prompt you should be ok. As I said, I know some security-knowledgeable
users who post here take that approach.

Well, that helps put me at ease. I believe open source software is probably better by definition, but if IE is capable of being "good enough" then that's all I care about. I just don't want to use extraneous stuff if I don't need to... I mean, MS makes you look elsewhere (at least pre-Vista, I hope) for practically EVERYTHING from disk cloning software to antimalware--can't they at least get the one program I use most frequently that THEY provide to not bite? =)

Anyhow, when I finally get this Linux business figured out, then I definetly won't need to care about this issue anymore. =)

Thanks a million.

Cheers!
.



Relevant Pages

  • Re: RWW ActiveX prompt
    ... Independent Experts (MVPs do not work for MS) ... After adjusting browser settings, ... sites - by default your IE security should prompt you. ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW ActiveX prompt
    ... Independent Experts (MVPs do not work for MS) ... After adjusting browser settings, ... sites - by default your IE security should prompt you. ...
    (microsoft.public.windows.server.sbs)
  • Re: Incessant IE dialogs re Scripts and Active-X
    ... Internet Options> Security> Internet Zone> click Default Level. ... you may have to examine settings in McAfee. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: RWW ActiveX prompt
    ... After adjusting browser settings, creating ... sites - by default your IE security should prompt you. ...
    (microsoft.public.windows.server.sbs)
  • Re: using group policy to block installation of spyware/adware
    ... Content Zone security settings, such as high for the internet zone and then ...
    (microsoft.public.security)