Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

QuickTime Unsafe ActiveX?



All,

I9d notice this a week or two ago, and had two different people e-mail me
today about it. 

For Windows users that do not have QuickTime installed on their computer,
they get this warning message when they visit a web page with QuickTime:

"This page provides potentially unsafe information to an ActiveX control.
Your current security settings prohibit running controls in this manner. As
a result, this page may not display correctly."

And of course, they do not get the QuickTime content.

I examined the certificate information provided by VeriSign, and noticed
that it's marked valid from 12/17/2001 to 12/26/2002, so it looks to me that
Apple hasn't updated the certificate. Did they lay that person off too? This
has probably been broke since December 27th, over 3 months. I've only
recently been made aware of it, and thought it isolated until today.

Can other with Windows machines confirm this? Completely uninstall QuickTime
and then go visit any of your pages with QuickTime content.

To get QuickTime to work, I had to go into the "Internet Options" control
panel, choose the "Security" tab, and for the "Internet" zone, set the
custom level and set "Initialize and script ActiveX controls not marked as
safe" to "Enabled" (or at least "Prompt"). I doubt the average Windows user
will do this.

Also, did Apple recently change or update the QuickTime ActiveX
(http://www.apple.com/qtactivex/qtplugin.cab)? I curled it and noticed that
it redirects (http://qtinstall.apple.com/qtactivex/qtplugin.cab which again
redirect to 
http://a1540.g.akamai.net/7/1540/52/20020920/qtinstall.info.apple.com/qtacti
vex/qtplugin.cab). I think an HTTP response 302  is acceptable for an
<OBJECT> CODEBASE attribute, right?

Ponyboy
----
QTVR --> Tons of Links, plus Tips & Tricks at:
http://homepage.mac.com/ponyboy/

mailto:email@hidden 
_______________________________________________
quicktime-vr mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/quicktime-vr
Do not post admin requests to the list. They will be ignored.



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.