this post was submitted on 10 Oct 2023
28 points (96.7% liked)

Security Operations

578 readers
1 users here now

A place for all things Cyber Security, from questions, rants, and stories, to the latest attacks, vulnerabilities, and zero days.

founded 2 years ago
MODERATORS
L3s
 

Microsoft is finally deprecating vbscript::Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11.

you are viewing a single comment's thread
view the rest of the comments
[–] thews 2 points 1 year ago

It wasnt sandboxed from the DOM, it has enablehtml access and later on tacked on cross domain protections. They did apply a sandbox to the filesystem unless you trusted it.

There was no fine RBAC or anything. https://learn.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-049

Java applets were pretty bad too. Flash and the old quicktime or realplayer were a legitimate need in early days before the standards bodies started moving. Silverlight seemed to be an attempt to stall the standards moving forward.

I get that some people liked it, but better options were already available, and could run on all devices with regular security updates.