Tag Info

New answers tagged

2

Fast answer No! Acceptable workaround Even an HTTPS connection from IE or Windows XP can't be considered as secured by a normal and even a skilled user. It was a known weak combination long before Microsoft announced its support deadline. Hence I would suggest a 2 steps approach for a webserver architect. Detect the referer, and if it is IE any version ...


2

Though it's better in the sense that communication is automatically between two windows (and you can hope the object disappears after it's transferred), I'm voting no¹ because: It uses Automation, its interface is public It's not thread-safe (so it's global) Windows in Windows can be hooked The only protection I saw was at the process level: you ...


1

Yes, these apps could record what you're typing, or generate arbitrary input events in your stead. There is hardly a thing you can do to prevent input-providing processes from abusing their privileges. This being said, there are some structural factors about how input is handled on mobile UIs that limit the risks of custom keyboards (as opposed to ...



Top 50 recent answers are included