I am right or wrong to be alarmed at this tech support advice? 2

[alicep]

I had difficulty accessing a tech support web portal for a product we use. They have updated the webportal for the maintenance agreement and I couldn't log on. I was getting an error about XP not being able to install certificate from "unknown publisher". I emailed their support and this is the response I rec'd from their tech support:

"We see that you are receiving an error "unknown publisher" when you try to install the pki certificate.
Please use the below steps:-
Open Internet Explorer
Click on Tools
Click on Internet Options
Click on the Security Tab
Click on Custom Level button
Scroll down to Download unsigned ActiveX controls
Choose enable under it.
Click on OK
Then click on “Yes” and
Click on OK."
They went on with instructions for manually installing the certificate they attached to the email message.

From a technical standpoint, enabling active X as they suggest is not a safe thing to do. What I did do was put their webportal in my Internet Explorer Trusted Sites.

But, I think they are lacking ethics when they suggest I do something unsafe just to make their webportal work. Were they being lazy and leaving off the steps to add their web site address to trusted site? Or, do they really not care that they suggest I open up my system to all Active X controls?

I intend to respond back to them about this. I am probably not the only person they have given this solution to and I doubt I am the only one questioning whether it is secure action to take.

I am just wondering if other people would complain to them or just let it go. Thanks for reading and feedback. Alice

 

[lgarner]

Check the second sentence in my reply and you'll see whether I clam this as an ethical issue:

"Not everyone who gives a wrong answer is unethical."

 

[cspilman]

But you claimed in your first post that it was an ethics issue:

no, it is an ethical issue.

Regards,
Chuck

 

[cspilman]

Sorry, quoted the wrong person. That was lionehill that stated that.



Regards,
Chuck

 

[lgarner]

Ah, hence the confusion. Never mind.

 

[dennisbbb]

Coming back to the original post, the question/statement is

"I am just wondering if other people would complain to them or just let it go."

Complain? no, just write back as a feedback that you've found a wiser solutions in details, and then simply "let it go", as with every technical issues we see everyday.

Boy we have wayyyyy too much time here.. hahaha..

 

[RCorrigan]

I agree with dennisbbb "step away from the issue" !!!!

You have been given a piece of advise that isn't 100% - is this due to inexperience, lazyiness, malice, who knows.

What you know is not to follow that advise in it's entireity ----- Let the company know that you are not happy, nicely of course, quote reasons why and suggest that they may want to Quality Assure their service in future.

Just my opinion of cource

<Do I need A Signature or will an X do?>