🚀 go-pugleaf

Hi David,

> That is a very simple "compromise" . Why didn't Microsoft include the
> destination filename in the Digital Certificate !!!

(Glad you corrected yourself). The digital certificate itself was certainly
not compromised.

I think the bigger question, and which I think you concur with, is why any
user should want executables being downloaded from the web and executed
without their knowledge (so long as once in their lifetime they decided to
"trust" an organisation).

Microsoft has just released an e-mail security update. One if it's (default)
features is that it won't let you execute executables. You have to save them
to you hard disk and then make a decision whether to execute them. Once an
organisation is trusted, ActiveX is more permissive.

If other organisations can so easily go around executing other
organisation's programs couldn't that lead to some problems?

Regards,
Adam