Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question is linked to my post Downloading file and internet security issue however this is more abstract.

Consider the following:

Website "" added to trust zone.

  1. Navigate to a website using internet explorer, download a file (No problem)
  2. run application as administrator, the application navigates to the web site, download a file ( Windows Internet Explorer blocked this site from downloading)

What is the different between 1 and 2? For me, Internet Explorer runs under admin rights and the application as well. Then why does Internet Explorer block the file from downloading via the application?

share|improve this question

migrated from Dec 6 '12 at 8:01

This question came from our site for professional and enthusiast programmers.

For one thing, the application layer here adds an additional level of risk.

In option #1 to modify the file itself, a potential attacker will need to have access to your data structure.

In option #2 the attacker may also harm you by modify the application itself (injecting it so it will send you a wrong/harmful file instead) which is somewhat easier to do than to gain full access to the websites files. (generally speaking)

I see your point. Granted, both options are somewhat risky, but the second one is simply more "hacker prone".

In the end, this boils down to risk management and calculated chances.

Finally, for executable files, IE should provide a warning - one way or another.

I stopped using IE several years ago, so maybe I wrong about this... Still, FF and Chrome will warn you, even if its "just" PDF.

share|improve this answer

protected by Community Nov 25 '15 at 5:18

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?