Click here to Skip to main content
15,896,606 members
Home / Discussions / C#
   

C#

 
GeneralRe: listview with combobox as subitem? Pin
Heath Stewart17-Oct-04 10:54
protectorHeath Stewart17-Oct-04 10:54 
AnswerRe: listview with combobox as subitem? Pin
mav.northwind17-Oct-04 20:25
mav.northwind17-Oct-04 20:25 
GeneralWinForm embedding in IE and Security Pin
afinnell17-Oct-04 8:53
afinnell17-Oct-04 8:53 
GeneralRe: WinForm embedding in IE and Security Pin
Heath Stewart17-Oct-04 10:52
protectorHeath Stewart17-Oct-04 10:52 
GeneralRe: WinForm embedding in IE and Security Pin
afinnell18-Oct-04 4:41
afinnell18-Oct-04 4:41 
GeneralRe: WinForm embedding in IE and Security Pin
Heath Stewart18-Oct-04 5:31
protectorHeath Stewart18-Oct-04 5:31 
GeneralRe: WinForm embedding in IE and Security Pin
afinnell18-Oct-04 5:45
afinnell18-Oct-04 5:45 
GeneralRe: WinForm embedding in IE and Security Pin
Heath Stewart18-Oct-04 6:24
protectorHeath Stewart18-Oct-04 6:24 
afinnell wrote:
I did like the idea of allowing the user to select 'Yes' when an ActiveX control is loaded on a page.

But as I said - from my experience in this field and from user studies into this problem, the vast majority of users will simply click "Yes" to whatever they are asked and most won't even understand unless you give them a long description that - because of the length - they probably won't read anyway.

afinnell wrote:
This is where Microsoft gets into trouble all the time. They pick ease of use over security sometimes and I completely understand. The time will come when we don't have to pick one over the other but I don't think that time is now.

Your problem is quite the opposite. With .NET Code Access Security, security takes a front seat to user experience, which is good for many reasons. For one - it's security. 'nough said.

Second is that smart-client development and deployment is more common in corporate networks where IT can push out security policies so the user doesn't have to worry about it.

ClickOnce bridges this gap and - if you think about it - is no different in terms of deployment than ActiveX controls (though it still uses a much better sandbox). The assemblies are downloaded and installed - just like ActiveX DLLs/OCXs/etc., or even Java JARs or .class files (if you're using the Microsoft JVM, which is now deprecated). It prompts the user.

ClickOnce is truly your answre here, but you could work around this problem by writing an ActiveX control that adds the code access policy (just an INF won't be enough since you need to modify CAS policy, which can be done directly to the .config file BUT BE CAREFUL and always backup the original).

In either case, they are not truly touchless. Using a strict touchlessly deployed application - unless you're doing something VERY basic (just look at the default privileges granted to the Internet_Zone in the Microsoft .NET Framework 1.1 Configuration snap-in) - is impossible for security-driven reasons.

I don't forsee this changing in our future until people change. It's practically impossible - even for AI (hey, bad people can fool humans, too) - to detect a malicious user from a decent user.

These are my opinions based on experience and research and not those of my employers.

This posting is provided "AS IS" with no warranties, and confers no rights.

Software Design Engineer
Developer Division Sustained Engineering
Microsoft

[My Articles] [My Blog]
GeneralRe: WinForm embedding in IE and Security Pin
afinnell18-Oct-04 7:47
afinnell18-Oct-04 7:47 
GeneralGet backup status using WMI Pin
WillemM17-Oct-04 7:19
WillemM17-Oct-04 7:19 
GeneralRe: Get backup status using WMI Pin
Anonymous17-Oct-04 16:52
Anonymous17-Oct-04 16:52 
GeneralRe: Get backup status using WMI Pin
Anonymous17-Oct-04 17:41
Anonymous17-Oct-04 17:41 
GeneralRe: Get backup status using WMI Pin
WillemM17-Oct-04 22:50
WillemM17-Oct-04 22:50 
Questionhow to remove an element from an array Pin
tom_dx17-Oct-04 4:48
tom_dx17-Oct-04 4:48 
AnswerRe: how to remove an element from an array Pin
CerebralKungFu17-Oct-04 5:21
CerebralKungFu17-Oct-04 5:21 
GeneralRe: how to remove an element from an array Pin
tom_dx17-Oct-04 7:36
tom_dx17-Oct-04 7:36 
GeneralRe: how to remove an element from an array Pin
CerebralKungFu17-Oct-04 8:42
CerebralKungFu17-Oct-04 8:42 
GeneralHelp Please... Waqas Butt Pin
| Muhammad Waqas Butt |17-Oct-04 4:41
professional| Muhammad Waqas Butt |17-Oct-04 4:41 
GeneralRe: Help Please... Waqas Butt Pin
Christian Graus17-Oct-04 10:56
protectorChristian Graus17-Oct-04 10:56 
GeneralRe: Help Please... Waqas Butt Pin
| Muhammad Waqas Butt |18-Oct-04 15:07
professional| Muhammad Waqas Butt |18-Oct-04 15:07 
GeneralRe: Help Please... Waqas Butt Pin
Christian Graus18-Oct-04 15:22
protectorChristian Graus18-Oct-04 15:22 
GeneralRe: Help Please... Waqas Butt Pin
| Muhammad Waqas Butt |18-Oct-04 21:44
professional| Muhammad Waqas Butt |18-Oct-04 21:44 
GeneralInterprocess communication Pin
petst17-Oct-04 3:00
petst17-Oct-04 3:00 
GeneralRe: Interprocess communication Pin
CerebralKungFu17-Oct-04 4:55
CerebralKungFu17-Oct-04 4:55 
GeneralRe: Interprocess communication Pin
petst17-Oct-04 5:40
petst17-Oct-04 5:40 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.