Quote:
Originally Posted by Phil^
Activex is a terrible terrible technology that has a deeply flawed implementation. It is a significant reason why there are so many exploits for things out there. yes its been patched again and again in order to try and make it better; but the best solution would have been to get rid of it entirely.
Regarding deployment, i resent how its being forced as a windows update in order to try and 'win the browser wars' again a-la-netscape. A products success should be entirely dependant on how good it is, not how easily it can be rammed down the average user's throat.
|
The activex implementation has changed so that activex things can;t just run by default (you need to conciously allow them on a case by case basis). Miscrosoft can;t just drop support for activex becuase loads of websites use it e.g. internet banking sites (that said a lot of theese are incompatible with the new security architecture and hence don't work.)
Its a windows update becuase IE is part of windows, IE7 is in essence a more feature-full version of IE6 but with better security - why not have it as a critcal update (you can choose not to install it)? Firefox also has an update feature. The other advanatge of a critical update is that it will force web sites to fix their systems to work properly with the new security archiecture so that for thoose of us that rely on IE for certain sites will have the minimum possible period of time with lost functionality.