From: nl
Subject: A Web site about PC security asking to lower PC/browser security

I received an e-mail this morning with an unknown .exe attachment which on inspection seemed to do something with registry keys. Since it doesn't look like any of the viruses I heard about recently I tried to look for it on .

Therefor, I visited first using Netscape 4.72 for Solaris (I use a Solaris workstation). The site shows a pop-up asking me to enable an ActiveX plug-in, but I might be able to use the site without it. The fact that I am using a different operating system for which an ActiveX plug-in isn't available at all has never crossed the mind of whoever designed that.

To top that, when I visit the site using Lynx 2.8.2 (a text-mode browser for Unix, quite popular with blind or near-blind Internet users) I just get a page asking me to enable scripting by LOWERING the 'Internet security' setting on my Web browser. Never mind the fact that there are browsers for which there is no scripting and that it can be a decision made for security reasons. Literal text: 

    3. In the Internet Control Panel, Select the Security tab
    4. Select the "Internet" zone
    5. If the security level is set to "High"
         a. Change the setting to "Medium" or click the "Reset" button
            for the Internet Zone

If McAfee wants to look like a company that sells products for 'Securing your PC' they might want to set up their Web site so I don't have to LOWER the security of my browser.

The security history of Javascript and ActiveX do not suggest to me that they are welcome on a 'Securing your PC' site.

Back To The Study