SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : Novell (NOVL) dirt cheap, good buy?

 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext  
To: Joe Antol who wrote (9023)3/9/1997 10:51:00 PM
From: Scott C. Lemon   of 42771
 
Hello Joe,

I meant to reply last night, but it got late ...

> Mat, they fixed that bug already. They react like a laser beam. They
> are relentless.

Yes, they fixed three of them ... but not the biggest. If you carefully read the second article from comp.risks that was in the previous posting, you would have seen that the real problem is not fixed. ActiveX is fundamentally flawed. And no one in the press will tell the truth. They won't expose Microsoft and ActiveX for what it is. I'm not saying that Novell has been overly loud a bout it, but you would think that the journelists (reading this board?) would try and truely educate the market about the holes.

There is no mechanism to I know of that will physically stop a "rogue" control from a wide range of malicious and/or espionage in the corporate market. I read an article that indicated that a "revoked" certificate is simply posted on a Web Site. That means that a "bad" control, which has it's certificate revoked, will continue to execute on your machine. And if that publisher gives away the keys on the Internet ... well ... I would guess that lots of controls could be using them then!

These controls could bug your office using your own sound card! These controls could transfer the contents of your hard disk (and any accessible network resources) to anywhere on the net! If you have one of these new video-camera peripherals (I have several on several systems ... Connectix $99.00 (killer little private(?) company in CA) a control could even use your own camera to allow people to watch you in your office! Uh ... slight problem here ... I agree that Novell hasn't attacked some of these security breaches, but I'm appalled that the "professional" journels haven't taken it upon themselves to better investigate and educate.

These are three trivial fixes to an incredible loophole in corporate security ...

> I just wish the non-technical investors here could really see how
> MSFT operates. It's amazing. I mean, *I* know that.

I'd agree that their marketing fluff ... the way they deflect accusations ... their slick moves ... are amazing! I agree also this is the business that we are in. They are a pretty amazing machine to watch ... and plot against!

> Novell was that way too. I dunno Mat, they don't appear to have any
> "fire in the belly" anymore. I dunno..

Oh ... there are a couple of us around ... ;-)

> Joe...

Scott C. Lemon
Report TOU ViolationShare This Post
 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext