'Trick shortcut' is just a hoax?

Microsoft has officially confirmed that the "shortcut tips" related to Internet Explorer are not entirely a security error.

"Trick shortcut" assumes that a file that automatically executes completely can be activated when the user enters the web address into the Internet Explorer browser.

Accordingly, for those who use Windows XP and Internet Explorer, if they enter any web address - for example, www.microsoft.com - into the browser, instead of seeing that web page A self-executable file located on the user's PC system will be started.

Microsoft has tested the authenticity of the "shortcut" as follows: Source: realtech

• Right-click on the screen and select News | Shortcut
• Point the path of the new shortcut to a file that can be executed by itself - for example, c: windowssystem32calc.exe
• Name the newly created Shortcut, www.microsoft.com
• Start Internet Explorer and enter " www.microsoft.com " in the address bar

With the way of entering such addresses, " calc.exe " can be called up. But if the shortcut just created above is deleted or added " http:/// " characters before " www " in the browser address bar, IE will connect to the Internet and not start the file as above.

Peter Watson - Microsoft Australia's chief security advisor - asserts that this is not a security bug and that it is just a feature that can be used to activate legitimate applications.

" We need to clarify the difference between a security issue and an application's feature. A security error can help hackers do something. But in this case it doesn't. The software is Legally installing on a new user's system can be enabled via this feature , "Watson said.

According to expert Watson, "shortcut tips" can help users in automating some tasks.

However, security experts are completely different views. They argue that this is absolutely not an essential feature and it can be exploited by malicious programmers.

Hoang Dung