Slashdot Mirror
Shmoo Group Finds Exploit For non-IE Browsers
shut_up_man writes "Saw this on Boing Boing: East coast hacker con Shmoocon ended today and they had a nasty browser exploit to show off... using International Domain Name (IDN) character support to display fake domain names in links and the address bar. Their examples use Paypal (with SSL too) and this looks very useful for phishing attacks. Interesting note that it works in every browser *except* IE (which makes this exploit a lot less dangerous in the end, I suppose)."v The reason IE isn't vulnerable is because it doesn't natively support IDN; with the right plug-in, it too is vulnerable.
Zeikfried - Reuters, Nigeria
In a self congratulatory press conference described by one historical analyst as to be "worth 10 Dresdens", the now world famous egalitarians of the Gay Nigger Association of America announced to the worlds press that their highly successful open source lastmeasure project has now reached over one hundred thousand homes across the world.
Amidst a snowstorm of tickertape and parade like festivity, Penisbird, one of the founders of the LastMeasure project, screeched triumphantly from his now gold plated dong perch that the exponental growth of the sought after shock site can only continue. And even those outside the GNAAs dark skinned sphere of influence can only agree, in the face of the cutting edge "xangadot" marketing techniques applied by GNAA LM sales reps Incog, Saturn, Trake, qat, and Zeikfred Tuvai.
The sheer ferocity of the xangadot effect has caught many by surprise, none more so than xanga spokesperson AzN_ThuG_08, who was quoted as saying "MUTHAFUCKA TAKE DOWN MAH SITE...BITCH IM LETTIN U...FUCK DIS SITE AND FUCK U TOO. I CAN MAKE A NEW ONE I GOT THA TIME u stupid muthafucka" before driving his nitroglycerin laced riced up honda into GNAA Headquarters in a suicidal and dastardly attempt to decapitate the GNAA leadership. Thankfully the 140 decibel exhaust of the now vapourised vehicle allowed the surrounding buildings to be evacuated several minutes before the atrocity took place.
Speaking from his converted 1970's brothel, overpaid financial analyst Gary Niger told Reuters, "The effects of what has been dubbed the 'Open Source Final Solution' can be felt in almost every area of digital society. A striking example of this would be the once worthless .info TLD being re-energised with a
huge cash and semen injection from the GNAA LastMeasure project, punctuated by
Netcrafts recent confirmation that the GNAA has now gained a massive
controlling stake in .info over the course of the past 2 months".
Can this momentum continue? Or has LastMeasure reached its unsurpassable xenith, with the only way left down? GNAA President timecop refused to comment, instead choosing to bathe naked in a pool of Yen laughing insanely. The future seems bright.
About LastMeasure:
A primitive version of LastMeasure was concieved by Penisbird of the GNAA after playing with an AIM utility named AIM Invader. It offered Penisbird a myriad of ways to crash AIM clients. By far the most powerful crash was the "last measure" crash, which would inundate an AIM client with file transfer requests, buddy list sends, messages full of smileys and colors, until the AIM client crashed due to lack of RAM.
The LastMeasure site originally consisted of Penisbird, Goatse, Tubgirl, Lemonparty, and Shitfaced Lady. But has expanded to include many other of the internets treasured icons. And with the addition of StatsMeasure, the clipboard data of thousands of unwitting victims has now been exposed for the world to see.
For more information about LastMeasure, visit the official website, LastMeasure.com
LastMeasure is licensed under the BSD Version 2 License.
About GNAA:
GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the first organization which gathers GAY NIGGERS from all over America and abroad for one common goal - being GAY NIGGERS.
Are you GAY ?
Are you a NIGGER ?
Are you a GAY NIGGER ?
If you answered "Yes" to all of the above questions, then GNAA (GAY NIGGER ASSOCIATION OF AMERICA) might be exactly what you've been looking for!
Join GNAA (GAY NIGGER ASSOCIATION OF AMERICA) today, and enjoy all the benefits of being a full-time GNAA m
Are they telling every man and his dog by letting tihs get on /.? If they had just released some patches for Firefox and written up some help files for people this would not mean much.
Dashboard Widgets
Another thing as well, this can't really be counted as a Linux vulnerability, if you look at the source code either in an email message or in the browser, it's clear as day that it's not going to the real paypal.com
This is just more FUD people
my blog
HA HA!
Fine by me. You can go tell all them people living in the Jungle to use English, I suspect you won't be comming back, so goodbye to you sir.
I like muppets.
You work for Billy, don't you.
The higher the technology, the sharper that two-edged sword.
If they don't "understand" something they shouldnt "use" it. would you give your 3 year old your net banking details to use them?? NO!
Interesting I just tried it from Fedora with KDEs Konqueror browser and it failed. I got Http:// could not be found.
I guess it only affects bowsers running on windows computers. But that won't stop the MS fanboys for a secconed
It is pretty clear that it meets your definition of "propaganda" because you did not like what they said.
Don't blame Durga. I voted for Centauri.