ant-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran" <stev...@iseran.com>
Subject Re: Ant you have a greeting card from Daisy.
Date Fri, 08 Nov 2002 22:55:36 GMT

----- Original Message -----
From: "Steve Loughran" <steve_l@iseran.com>
To: "Ant Users List" <ant-user@jakarta.apache.org>
Sent: Friday, November 08, 2002 2:50 PM
Subject: Re: Ant you have a greeting card from Daisy.



> BTW: http://www.messagelabs.com/viruseye/report.asp?id=111
>

oh, this page also implies it uses a JAR based install too. So maybe having
java installed in your web browser is a vulnerability.

As an aside, this exposes a flaw in signed code. Signed code says it hasnt
been tampered with, it doesnt guarantee that the code isnt malicious. Even
if sun, netscape and MS went and revoked the relevant code signatures, they
could just buy new signatures and resign everything. Sandboxes are all that
you can trust.

-steve


--
To unsubscribe, e-mail:   <mailto:ant-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:ant-user-help@jakarta.apache.org>


Mime
View raw message