Thursday, January 11, 2007

Active X is a security risk

Brian Krebs makes a comment about Acer's use of Active X being a security risk in today's Security Risk column.

While Acer should be criticised for the sloppy use of this tool, Active X threats are the most common problem for Windows users. Unfortunately, many programmers and web site designers use Active X. Norton products are probably the worst for this.

Like Symantec, spyware writers have been the most enthusiastic users of Active X controls. This is why spyware is such a problem for Internet Explorer users and why a spyware infected machine running a Norton product will be reduced to a quivering heap. Active X is the number one path for infecting a computer.

To avoid all of this, we recommend surfing the net with Firefox, which doesn't use Active X, and in a limited user account, which prevents system changes.

Once again, this is an example of Microsoft's cavalier attitude to security. Windows users should assume their systems are not secure and be very careful about what they do on the net and the profile they do it in.