Slashdot Mirror
New Spoofing Vulnerability in IE
Jimmy M. writes "A new vulnerability has been announced in Internet Explorer, also affecting XP SP2, which can very easily be exploited by a malicious web site to completely spoof the address bar. The vulnerability is very similar to another vulnerability disclosed just about a year ago called the '%00' vulnerability, which also was widely exploited by phishers. A demonstration is also available."
Get it here
I use wget and read the raw html in a text editor.
Apparently it's been patched.
Next, we'll be reading about studies showing that two hydrogen atoms and one oxygen atom form a clear, wet substance.
This is not a reason to use Firefox - it's useless in Firefox.
... all. Oh.
I just clicked the demo link using Firefox 1.0, and nothing happened at
Never mind.
sigs, as if you care.
I really want to try this but I have such problems getting stuff to run in wine.
What changed under Obama? Nothing Good
I just tried it with a potatoe peel. Nothing. ;)
As it said.. IE. Secunia does test these things on other browsers and as they have shown in the past they are likely to come up with cross-browser exploits in the future.
What OSS has to do is release ads to TELL people how bad IE is, not how good Mozilla is alongside. SCARE people into realizing that their entire way of life is AT RISK if they continue to use IE.
Or maybe a simple 5 color-coded chart!
RED - Browsing with IE
ORANGE - something witty
YELLOW - something wittier
GREEN - Browsing with Firefox
BLUE - Unplugging your network cable
Firefox(tm). The next safest thing to unplugging your network connection.
When modding "Informative", please make sure it both has a source and IS actually informative.
So, to check a Hotmail message, I just need to manually type
g ?m sg=MSG1103631600.24&start=3248752&len=4735&imgsafe =n&curmbox=F000000001&a=b2cbfd3baddabfc913aacc3f36 f8590f
http://by2fd.bay2.hotmail.msn.com/cgi-bin/getms
in my address bar....
Thanks, Microsoft! I needed to brush up on my typing skills.
(with pointed finger) Ha-Ha
music lover since 1969
RED - Browsing with IE
ORANGE - Giving your cat a bath
YELLOW - Cooking bacon in the nude
GREEN - Browsing with Firefox
BLUE - Unplugging your network cable
Soylent Green is peoplicious!
GREEN - Browsing with Firefox
BLUE - Unplugging your network cable
ULTRAVIOLET - Browsing with Opera
Opera(tm). The next, from the other side, safest thing to unplugging your network connection.
...if they just posted news announcing days when vulerabilities aren't found in IE.
--AC
So we should be saying "OMG LINUX IS 578% MORE 1337 THAN TEH LEADING MONOPOLY!!!!" ?
We all live in a #FFFF00 submarine...
Good start. The main issues are that "1337", and "monopoly" may be confusing to your average consumer (they'll have no idea what "1337" is, and will be confused about why you are comparing your product to a board game)
..concordantly the 5% saved through a 2 driver plan inexorably causes a diminution of the overall non-fault accident premiums. Ergo those signing up before January 1st will...
A fundemental rule of marketing is that your commercials should be understandable by your entire demographic (sometimes ad campaigns will use "inside jokes" if the demographic they are targeting is tight enough, but it's still risky). By using special words or concepts only known or believed by a small number of people will mean you risk (or nearly guarantee) having your commercial coming across to your audiance like The Architect from The Matrix trying to sell them car insurance -
> By manually typing the URL in the address bar, you can verify
> the information that Internet Explorer uses to access the
> destination Web site. To do so, type the URL in the Address
> bar, and then press ENTER
Ironically MS themself break this with their hotmail service. When going to a link from a Hotmail email, the link is converted to a hotmail link followed by a seekrit ID key a hundred lines long, just to show you the (possibly spoofed) page with that hotmail header on it.
MS, You fail it!
Bill Gates died and went to heaven. As he stood in front of St.Peter at the Pearly Gates, he saw a huge wall of clocks behind him. He asked, "What are all those clocks?"
St. Peter answered, "Those are Software Vulnerability Clocks. Every computer program on Earth has a Software Vulnerability Clock. Every time a program is compromised due to a bug in the code, the hands on that program's clock will move.
"Oh," said Bill, "which clock is that?"
"That's the UNICOS clock. The hands have never moved, indicating that it was never compromised by an attacker."
"Incredible," said Bill. "And which clock is that one?"
St. Peter responded, "That's the OpenBSD clock. The hands have moved twice, telling us that the "Only one remote hole in the default install, in more than 8 years!" was compromised only two times in this operating system's life."
"Where's Internet Explorer's clock?" asked Bill.
"That's in Jesus' office. He's using it to drive the generators, which provide power for our celestial copy of Las Vegas."