Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: QuickTime Unsafe ActiveX?



No one replied to me on either the QTVR or LSP list, so I think it's
isolated to me. But I had 3 different people (clients & colleagues) tell me
that they couldn't view any QuickTime content (Apple's web site, my web
page, other QTVR developers pages). No one else on this list has heard of
any problems from Windows users? Weird.

I tested further and found all IE browsers from 4-6, and on all Microsoft OS
from 98-XP, do not display QuickTime content, unless the user manually goes
into their security prefs and changes it.

But, I did notice this: If you have QuickTime installed, and go through the
process to uninstall it, there's still a leftover file (usually at
c:\program files\quicktime\qtplugin.ocx). If this file Is still there, then
the next time you go to a page with QuickTime ActiveX, you will get a
certificate signed on 03/26/2003 that is valid from 01/06/2003 through
01/09/2004.

But, with this file deleted (or not present as on a brand new machine), the
certificate is the expired one, and the default security setting of IE will
prevent QuickTime content from being displayed.

Can somebody please confirm this? To fully test find a computer that has
never had QuickTime installed, or uninstall QuickTime and be sure to
manually delete the "C:\program files\QuickTime" folder. Also, does anyone
know if CompUSA or some other retail chains have PCs hooked up to the
Internet, so that I could try viewing QuickTime content on those machines?

Ponyboy
----
QTVR --> Tons of Links, plus Tips & Tricks at:
http://homepage.mac.com/ponyboy/

mailto:email@hidden

> From: Jimmy McGue <email@hidden>
> Subject: QuickTime Unsafe ActiveX?
>
> I9d notice this a week or two ago, and had two different people e-mail me
> today about it. 
> 
> For Windows users that do not have QuickTime installed on their computer,
> they get this warning message when they visit a web page with QuickTime:
> 
> "This page provides potentially unsafe information to an ActiveX control.
> Your current security settings prohibit running controls in this manner. As
> a result, this page may not display correctly."
> 
> And of course, they do not get the QuickTime content.
> 
> I examined the certificate information provided by VeriSign, and noticed
> that it's marked valid from 12/17/2001 to 12/26/2002, so it looks to me that
> Apple hasn't updated the certificate. Did they lay that person off too? This
> has probably been broke since December 27th, over 3 months. I've only
> recently been made aware of it, and thought it isolated until today.
> 
> Can other with Windows machines confirm this? Completely uninstall QuickTime
> and then go visit any of your pages with QuickTime content.
> 
> To get QuickTime to work, I had to go into the "Internet Options" control
> panel, choose the "Security" tab, and for the "Internet" zone, set the
> custom level and set "Initialize and script ActiveX controls not marked as
> safe" to "Enabled" (or at least "Prompt"). I doubt the average Windows user
> will do this.
> 
> Also, did Apple recently change or update the QuickTime ActiveX
> (http://www.apple.com/qtactivex/qtplugin.cab)? I curled it and noticed that
> it redirects (http://qtinstall.apple.com/qtactivex/qtplugin.cab which again
> redirect to 
> http://a1540.g.akamai.net/7/1540/52/20020920/qtinstall.info.apple.com/qtacti
> vex/qtplugin.cab). I think an HTTP response 302  is acceptable for an
> <OBJECT> CODEBASE attribute, right?
_______________________________________________
quicktime-vr mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/quicktime-vr
Do not post admin requests to the list. They will be ignored.

References: 
 >QuickTime Unsafe ActiveX? (From: Jimmy McGue <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.