Wuts Wid Dis Active X Fingy on Ere Den !

Discussion in 'other security issues & news' started by Spanner intheWorks, Dec 19, 2004.

Thread Status:
Not open for further replies.
  1. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Yes, that is what he is talking about.....
     
  2. iceni60

    iceni60 ( ^o^)

    Joined:
    Jun 29, 2004
    Posts:
    5,116
    sorry i was making some tea. yes i was talking about the glow and shadow <tags> . my IE settings are different now to back then, i'll try and do it. maybe it needs active scripting too o_O all i know is i used to have the alerts he's talking about, if i allowed it i saw the glow and shadow, if i disallowed it, i didnt.
     
  3. iceni60

    iceni60 ( ^o^)

    Joined:
    Jun 29, 2004
    Posts:
    5,116
    i couldnt get it to prompt. maybe forget what i said and ask SITW to allow the prompts and see then o_O
     
  4. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    It would be helpful if you wouldn't mind to either post a Wilders link where this is happening....or add me to what puff-m-d asked in an earlier post.

    said by puff-m-d:
    "You can IM or e-mail (addy in profile) me with the user names you click on that triggers the warnings and I will take a look"
     
  5. iceni60

    iceni60 ( ^o^)

    Joined:
    Jun 29, 2004
    Posts:
    5,116
    come on give them some links :)
     
  6. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Actually....the best I can find by attempting to interpret your first post is where you mention...."Certain ppls posts and/or their names"....and while that does narrow it done some....that's not the same as saying it's happening all over.

    In any case....I'll offer you a link....and if you have not changed your IE settings....tell me if you get the ActiveX and plugin-ins warning Please.

    This link---> https://www.wilderssecurity.com/showpost.php?p=327872&postcount=12

    Example of an IE plugin found in that above link:
    Code:
    <table style="border 0px;"><tr><td style="filter:Glow(color=yellow,
    strength=4)"><table style="border 0px;"><tr><td style="filter:shadow
    (color=white, direction=left,270)"><font color="red"><font size="5">
    <b>this is activex <img src="images/smilies/cool.gif" border="0" alt=""
    title="Cool" class="inlineimg" />  </font><font size="1">i
    think</td></tr></table></td></tr></table> 
     
  7. ~*Nat*~

    ~*Nat*~ Registered Member

    Joined:
    Jul 9, 2004
    Posts:
    8,129
    Location:
    Germany/Ohio-USA ~ between two worlds
    _________________________
    Hi all,

    All I would like to add that I DO get the same prompts that Mr.P's attached
    images show.
    That happened after I put Wilders in the Internet Zone - and - I get prompted for ActiveX & Plug-ins to run, randomly.

    @Bubba...yes I Do get the warning (prompt) when clicking on the link.

    Hope this helps...

    ~Nat~
     
  8. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    In the Web content zone that Wilders has to adhere to....find the Run ActiveX controls and plug-ins selection in the ActiveX control and plug-ins section....and enable Run ActiveX controls and plug-ins Please....and tell me if you still receive the pop-up warning ?
     

    Attached Files:

  9. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,280
    Location:
    New England
    Yes, you will see some ActiveX alerts from Internet Explorer here under the conditions mentioned above - that being the special text formatting used by things like GLOW and SHADOW, but also in a few other places.

    It has to do with how Internet Explorer implements CSS Stylesheets. The quote above in Bubba's post is the relevant code. The text filter used to display the glowing and shadowed characters within IE is implemented using an embedded ActiveX control that comes with Internet Explorer (since version 5).

    Also, you will see it in a few transition effects, though the one most people would be familiar with is the Log Out option. Many of you will notice that when you first click Log Out, but before you confirm (hit OK in the popup), the forum turns to black & white (or many grays). That is also a text filtered effect implemented the same way in IE.

    Here are a couple threads from the vBulletin Forum asking about this, and there are many more:

    http://www.vbulletin.com/forum/showthread.php?p=572812
    http://www.vbulletin.com/forum/showthread.php?p=678709

    It is indeed the "Run ActiveX controls and plug-ins" setting (being at prompt) that will turn up these notices, not the "Download signed ActiveX control" (or unsigned).

    As to active scripting, the vBulletin forum software is loaded with active scripting. This forum is heavily Javascript based. Many buttons and functions are entirely Javascript based. If you do a 'view source' on almost any page here you'll find many Javascript functions. (Just search for things like: "<script type="text/javascript">" in the source.)
     
  10. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    To add to my above post....concerning the Run ActiveX controls and plug-ins. The important part of that is the ActiveX plug-in....and in the case of the above code I posted....note the table code. That is what is referred to as DOM(Document Object Model)....of which Table is the code used.
     
  11. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    While the desired result of changing the setting was as expected....hopefully the important thing you found thru the explanations is that there is a difference between ActiveX controls(obj) and ActiveX plugins(dom).
     
  12. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Please forgive me, but now I have a question.... Is an IE plug-in considered to be activeX? Or is it that some IE plug-ins can utilize activeX but not all do? I am only used to hearing activeX refer to controls and DPF's (downloaded program files).....
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.