Re: [Full-Disclosure] Re: shell:windows

[Nick FitzGerald <nick@xxxxxxxxxxxxxxxxxxx>]

> No - there are numerous ways to force input into places like the address 
> bar.  As someone else already stated, for this to work you have to be 
> able to push it into that area.  There are numerous ways to do this and 
> for a person with a little more time on their hands, finding one that 
> works properly should not be difficult.
> 
> Stop thinking about this as being a one-dimensional issue.  Security 
> issues very rarely are that one-dimensional. 

Hey guys -- stop picking on Larry.

If Microsoft gets to think one dimensionally about security, why 
shouldn't eWeek's "Security Center Editor" be able to do the same?


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html