MowGreen [MVP] wrote:



Not true, Bruce. They also use exploits to infest unpatched systems with
NO User intervention. Lately, they've taken to exploit Sun's JRE
versions prior to 1.4.2_06. Once the system is infested, the User can no
longer update successfully either.


I think the key word above is "unpatched." Remember, one of the key
components to computer security that I've identified is the maintaining
of current patch/service pack levels. I've not seen nor heard of one
that can penetrate a properly maintained (including patches) system yet,
but I wouldn't be too surprised to see one come along. I do think the
threat could be mitigated by properly managing one's Java (and ActiveX,
if applicable) security options from within the browser. Anyway, I've
always acknowledged the existence of such a possibility in a small
number of cases; such exploits can exist, but are, to my knowledge,
exceedingly rare.


Misleading pop up windows are another favorite of the miscreants. "
You're system is infested with SPYWARE. Click here for a free scan !"
The system is then innundated with various malware.


Proving my point. The Black Hats mostly rely upon the gullibility (and
often greed) of their victims. The phenomenon even has a widely
publicized name: Social Engineering. A properly educated computer user
wouldn't fall for such an obvious scam.


The issue is the BAD GUYS that are doing their nefarious deeds, not the
naive Users.


Granted, it's ultimately the fault of the bad guys. But there always
have been, and always will be, bad guys. People need to think for
themselves and abandon their naivete; just because there are bad guys to
blame is no reason not to defend oneself.


Maybe a firing squad would end this nonsense.



Perhaps, but that'd be too quick and painless. I prefer to envision a
fate involving partial burial, honey, and ants.


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH