[Full-disclosure] Enforcing Java Security Manager in Restricted Windows Environments?

2006-12-08 Thread Jan P. Monsch
tell java.exe to always use the Java Security Manager without the possibility of manipulation by the user? I would be very interested to learn your ideas. Kind regards Jan P. Monsch ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk

[Full-disclosure] Some Thoughts about Office Open XML and Malware Detection

2006-12-07 Thread Jan P. Monsch
oducts will grow. My retesting today shows that the detection rate of Netsky as an embedded object in a Office 2003 Word XML is still at the same level as 3 months ago. I fear that the AV industry is not quite yet ready to protect their customers against XML delivered attacks. Kind r