Skype squishes cross-zone scripting bug
Skype has fixed a cross-zone scripting weakness in its voice over IP client software which spawned a couple of security bugs over recent weeks. Problems have arisen for Windows users because Skype uses Internet Explorer web controls to render internal and external HTML pages. Skype is running these web controls in Local Zone …
Updates
Why can't skype just patch the flawed code, rather than forcing people to download all 22Mb again?
@Updates
'cos they're trying to beat the size of Apple's QT updates?
Patching?
Well, looking in Skype\Phone\ on Windows, there's a 20.8Mb Skype.exe.
So the question should be "Why don't Skype break up a 20.8Mb executable into individual components so that they *can* just patch the flawed code?"
@Matthew...
I was just thinking the same thing whilst watching it crawl in at 66KB/s *yawn*
with a 22MB update...
more like "Skype sledge-hammers cross-zone scripting bug"
