[Dshield] Knowing what's plugged-in
Jon.Kibler at aset.com
Fri May 30 03:36:46 GMT 2008
-----BEGIN PGP SIGNED MESSAGE-----
The Adobe flash player issue brings up what I consider a critical question.
Few (IMHO, very few) web browser plug-ins let you know when there are
updates available. After playing around with Safari and Firefox, the
only out-of-date plugins that I experimented with that told me they were
out of date were the Acrobat Reader and QuickTime plugins. Even more
scary -- and I believe a fundamental problem with web plugin design --
they did not provide an offer to update to a newer version until AFTER
they had executed (potentially malicious) content.
Which gets me to my question: Is there any good tool available to
inventory each workstation in a organization and report on installed
plugins for each browser installed?
As a follow-up question: Is there a tool available that will push out
plugins to every browser that needs an update? (Something like patch
management for browser plugins?)
TIA for feedback.
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC USA
My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
Filtered by: TRUSTEM.COM's Email Filtering Service
No Spam. No Viruses. Just Good Clean Email.
More information about the list