Slashdot Mirror
New Vulnerability Affects All Browsers
Jimmy writes "Secunia is reported about a new vulnerability, which affects all browsers. It allows a malicious web site to "hi-jack" pop-up windows, which could have been opened by e.g. a your bank or an online shop. Here is a demonstration of the vulnerability"
Jimmy writes "Secunia is reported about a new vulnerability"
And in other news, Slashdot is reported all about a new grammatical error in the headlines.
Reporting anyone?
Indy Media Watch-Proctologist of the Internet
the demo come up blank. all i see is a window called (Untitled) (and the globe spins then dies)
You must be new here.
File under 'M' for 'Manic ranting'
I just don't believe it. Anything -- even an exploit -- working in all browsers would be unprecedented!
i did it using safari, got citibank, i have no account but was able to transfer $100 million into an offshore account. That was some test
Anyone seen my jagged little pill?
Security through server meltdown?
my journal: scripts for leaching porn baked fresh daily
No, it's still impervious, the exploit didn't work on my system. Sorry, OSS still has a 100% perfect, virignal, like freshly-fallen snow track record. /sarcasm
No one ever said any of those things, and I doubt that anyone believes them, so get off your high-horse.
I just don't believe it. Anything -- even an exploit -- working in all browsers would be unprecedented!
Lynx appears to be unaffected.
My lynx browsing is totally unaffected.
Ahhhhh, so if you follow the instructions perfectly it might work. If you have multiple windows open, it won't work. Does this mean their vulnerability has a vulnerability?
Doesn't seem to work on Cyberdog, but the OpenDoc community isn't as large as it used to be, so we're probably safe.
You obviously typed emerge coolwebsearch at some point.
LOL! I suppose I should change my /. password now, just in case Secunia's proof of concept had a more-than-friendly bit of code in it.
when it takes Slashdotters 5 minutes and other people's help to activate it...
Yeah, this is the first thing that came into my mind as I read slashdot in lynx, however, I wasn't able to log in to post. So, the tradeoff is there: being immune to some silly vulenerability, or having a completely functional browser. Take your pick..
Mosaic v1.0 users are also reportedly not affected. Nevertheless, experts strongly encourage Mosaic users to upgrade anyways.
-- listen to interesting music, support independent radio... WPRB
"Firefox has prevented this site from opening 1632 pop-up windows. Click here for options..."
...And now 2000... persistent little bugger...
And this is a version of Firefox I installed approximately two weeks ago.
The Penguin Producer
All browsers? Can someone tell me how to get this to work on Lynx?
LedgerSMB: Open source Accounting/ERP
feel sorry for citybank's webserver?
Ignorance kills, complacency kills, hatred kills, but usually not the ones guilty of them.
Rumor has it, patches to support this exploit in Lynx will be available by the end of the week. ;)
It didn't seem to work under Lynx... I don't really use that browser, but I'm just saying it doesn't affect ALL browsers.
That email I got about having extra security by making sure 1337hax0rz.ru was loaded in a separate window while using my bank's website was a lie? Maybe that is why my bank keeps asking me to give them my information again. How many times can they loose my account number and SSN?
SIGFAULT
Are you the person at Microsoft who suggested manually typing in the URLs as a work-around for that IE exploit?