🚀 go-pugleaf

On Sat, 1 Jul 2000 11:33:45 +1200, Adam Warner <Adam.Warner@xtra.co.nz> wrote:
>> If other organisations can so easily go around executing other
>> organisation's programs couldn't that lead to some problems?
>
>For the avoidance of doubt that should read:
>"If other organisations can so easily go around executing another
>organisation's programs on your computer without your knowledge, couldn't
>that lead to some problems?"
>

Even if you trust the organization involved, It cannot be guaranteed that a 
backdoor that they include in a program or OS will not be used by someone else.

>
>What about an ActiveX program that MS releases but is later found to have a
>serious bug on some configurations and could, for example, corrupt the data
>of a user's computer? 

If you have enabled automate updates on win98 / 2000 this will happen
automatically! 

Shhhh - this is what Mr Gates is planning to do if Microsoft is forced to
change its business practices.

>Microsoft would release and download a new version to
>users' hard disks. Other sites may be either slow to update or may choose to
>have the executable run on users' computers. After all, the program would be
>digitially signed by Microsoft. I'm unaware of whether MS can immediately
>revoke the digital signature on a program they have released in the wild
>(i.e. allowed to be downloaded and executed on users' computers). Maybe they
>can.
>

I don't think it is possible to revoke individual signed Items, So this would 
probably involve distributing another set of public keys.

David Mohring - "This tape will self destruct NOW!"