posted on Saturday, October 23, 2004 1:23 PM by stefandemetz

IE Security

IE is definitely the most insecure gateway to a PC. So I was thinking: why not run it in a guest account context?

It would be easy for MS to replace some code in IEXPLORE.EXE to run the least priviledge account when loading the associated dlls.

Another good trick would be to replace the shortcuts on the desktop and programs to launch IE with a RUNAS \

 

some good links:

http://blogs.msdn.com/tristank/archive/2004/08/02/204982.aspx

http://sqljunkies.com/WebLog/donkiely/archive/2004/07/29/3680.aspx

http://blogs.msdn.com/aaron_margosis/archive/2004/06/23/163229.aspx

http://blogs.msdn.com/aaron_margosis/archive/2004/07/07/175488.aspx

Articles (+runas code utilities)

http://www.codeproject.com/tips/runas.asp

http://www.codeproject.com/csharp/RunAs.asp

least privilege:

http://weblogs.asp.net/gad/archive/2004/01/24/62539.aspx

http://weblogs.asp.net/rhurlbut/archive/2004/07/08/177271.aspx

Longhorm least privilege

http://silverstr.ufies.org/blog/archives/000612.html

http://msdn.microsoft.com/library/en-us/dnlong/html/leastprivlh.asp

http://msmvps.com/secure/archive/2004/04/27/5572.aspx

http://msmvps.com/donna/archive/2004/04/28/5584.aspx

http://geekswithblogs.net/ssimakov/archive/2004/04/23/4230.aspx

http://geekswithblogs.net/dwoodard/archive/2004/04/27/4443.aspx

http://channel9.msdn.com/ShowPost.aspx?PostID=5187

http://channel9.msdn.com/ShowPost.aspx?PostID=8399

Comments