Comment Re:Dai Zovi is Completely Wrong (Score 1) 415
awitod is absolutely correct.
I can't even build a .NET object on a local network drive and then load it using the default security model.
Now, if someone could inject code into CAS and make it allow assemblies to be trusted, that would be interesting, but "Microsoft assumes they're safe because they're .NET objects" either shows he doesn't know what he's talking about, or that he's lying.