3 ms·

This is not correct. When I run it on IE, first it asks permission to run ActiveX controls on my browser, which I don't allow if I trust. Then of course, it is

by alpb 14y ago

This is not correct. When I run it on IE, first it asks permission to run ActiveX controls on my browser, which I don't allow if I trust. Then of course, it is just like Flash, it can track your mouse.

jey 14y ago
Where in the exploit HTML + JS is the ActiveX component being invoked from?
blahpro 14y ago
This is probably related to the YouTube video embed on the demo page, which I believe uses Flash. The mouse tracking itself is entirely JavaScript. Edit: I am one of the authors of the demo code included in the disclosure.
wlesieutre 14y ago
I received no ActiveX warning with Windows 7 and IE9. What version are you running?
- alpb 14y ago
  IE10.