
Microsoft Corp. today announced it will withhold software injection ads using techniques MiTM man in the middle man-in-the-middle, and will classify as malicious software, as part of the company's efforts to give consumers control over their devices resources.
The company said in a statement that "the creation of ads and injected within web browsers software must be installed and operated on and off and delete according to all the user's desire," she said, "choice and control must follow the user fully, and we intend to protect it."
Microsoft said there are some advertising software that uses MiTM including injection technique by proxy or server you change the DNS settings and manipulate the network, which means it is intercepting all communications between the computer and the Internet to inject ads from the outside and it happens without the possibility of browser control over it .
The company said in a statement, "Our goal is to keep the user's ability to dominate and control the browser, and are such methods Ptqll this control", and complete the statement "Many of these methods also lead to change the advanced settings, and the control of a way that prevents the majority of users the ability the discovery, change or controlled. "
MiTM techniques and allow users the occurrence of a victim of malicious software, where the attacker can deceive the mechanism and make it the Display Network is providing malware embedded in the ads, and add MiTM techniques are security risks for customers.
The company said, "Most modern browsers have internal control possibilities informs the user when there is a possibility to change their browsing and to obtain confirmation from the user indicates it's OK, but many of these methods do not produce such warnings and the reduction of choices and control of the user."
Microsoft has indicated that it encourages developers to comply with the new standards, and software developers have warned that they will disclose and eliminate programs that do not comply with the new standards when it enters into force on March 31, 2016.
ليست هناك تعليقات:
إرسال تعليق