@cstross @davidgerard

We have and we haven't:

• Microsoft ActiveX controls,
• Mobile code on Web pages
• Microsoft Word macro viruses

Every time we mix code and data, it becomes a festering wound in the flank of information security. We've had ample opportunities to learn the lesson, and still we run headlong in the wrong direction.