IT Security Topic — Phishing

Clarifying the role of "Active X"
By Ken Rumer

ActiveX controls are only available in Internet Explorer on Windows systems. This feature allows the installation of software by companies if you deem the publisher to be trusted and the software to be necessary for greater functionality on your computer.

ActiveX controls should not immediately be considered dangerous as many of us use them everyday. Macromedia Flash, Shockwave, Adobe Acrobat, and Microsoft Windows Update are examples of these programs. ActiveX closely follows the "Plug-in" paradigm of other browsers, with the exception of requiring a download.  ActiveX also provides an added security window showing that the authenticity of the application was verified. 

The key here is trust: If a security window pops-up and asks you to install software, you should research who is attempting to install software on your computer and only grant the software the right to install if you will gain necessary functionality. The ability to download and install software is cross-browser and cross-platform; in fact ActiveX and Plug-ins have never been considered a vulnerability.

Here's an example of the security window:

Contact Information
Campus IT Security Office
(303) 735-HELP
security@colorado.edu