Productivity Portfolio

Like many technologies, ActiveX has mixed reviews. While many developers applaud the interactivity it offers users, security experts worry about rogue programmers. As a consumer, we often are caught in the cross fire.

ActiveX sounds like a complex term, but it's not. It is a way to make programs interactive using a set of controls and rules. Using ActiveX, developers can have programs share resources and communicate with each other. For example, our web site relies on a Macromedia ActiveX control (flash.ocx) to play the Flash tutorials. This control was most likely installed to your browser the first time you attempted to play a Flash file from a web site.

You often hear of ActiveX in context with the web. Many web sites use ActiveX to add animation, tickers, surveys or other multimedia. Most likely, you don't realize ActiveX is involved as your browser has accepted a signed ActiveX control. But, if you were to disable ActiveX, you might notice some web pages looked dramatically different. You would also see an error message such as the one below.

Although ActiveX controls can make web pages dynamic, there are security concerns. Unlike Java applets, ActiveX components have full access to the Windows operating system. A rogue programmer could write an ActiveX control to delete data or other undesirable activities. This is why the default settings for most browsers are set to disable unsigned ActiveX controls. An unsigned control is one where the programmers haven't identified themselves with a signing authority such as VeriSign.

Your browser should also ask you for permission before downloading. If a program hasn't been signed, you should get a Security Warning dialog. If you're not familiar with the application being downloaded, you should click "No".

In some instances, you may know the application. Some companies have internal applications that aren't signed. Other applications are from small developers who might be getting a signature. Generally speaking, signed applications are safer than no signed ones.

The bottom line is that ActiveX controls can make web pages more dynamic and enjoyable. But, like all tools, there is the opportunity for misuse. To reduce problems, make sure to read your security warnings.

Securing Internet Explorer
Scanit Browser Security check
Qualys Browser Security Check
Before You Connect a New Machine to the Internet
Browsing Safely: Understanding Active Content and Cookies