🚀 go-pugleaf

On Fri, 30 Jun 2000 23:57:26 +1200, Slow 
             <aputto@htomail.com.no.spam> wrote:
>"Adam Warner" <Adam.Warner@xtra.co.nz> wrote in message
>news:8jhds5$q2b$1@news.ihug.co.nz...
>> Microsoft-signed files are trusted by default. This and the ability to
>> automatically download the files to a users hard disk at any location
>allows
>> any unprotected files (read: virtually all) to be overwritten.
>
>IE objects made by Microsoft are trusted by IE (this actually makes sense).
>All other object downloads (including Microsoft's) will display the
>'certificate' window.
>

So it is OK for Microsoft to have unrestricted access to your network via
any downloaded executable or script signed as "Trusted by IE" without 
notifying the user?

IMHO the problem is that, even if you trust Microsoft implicitly, it looks as 
if the digital signature system may have been compromised. This could be the 
reason for the rushed release of the patch.

David Mohring - May you live in interesting times