Slashdot Mirror
Zero-Day IE Exploit Takes Control of PCs
anethema writes "A remote IE exploit with implementations is currently in the wild. From the article: 'Exploit code for a critical flaw in fully patched versions of Microsoft Corp.'s Internet Explorer browser has been released on the Internet, putting millions of Web surfers at risk of computer hijack attacks.' Aparently all you have to do is browse the page to be affected. There is no patch, but since it is a JavaScript exploit, you can work around it by disabling JavaScript."
From eWeek: The group that published the exploit said Microsoft has been aware of the Javascript Window() vulnerability for several months but was mistakenly treating it as a low-priority denial-of-service flaw.
Because anything that allows a malicious user to exploit your system and hijack isn't a flaw... it's a feature!
GetOuttaMySpace - The Anti-Social Network
Microsoft's total time of 0wnerzship continues to decrease.
Its important for MS to keep ahead in this area.
WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
Ah, the Firefox of Opera - who is that, Pavarotti?
I use netcat.
-- MartinG To mail me: echo kewyjlcxyzvjfxbqwh | tr bcefhjklqvwxyz
Now that you've read the comments, your Windows box belongs to OSTG. Please stand by while we load Linux.........
This sig isn't original enough, it's time to come up with something witty...
Well, there might be no customer impact at this time, but seeing as the exploit is published now, can I ask you again in about 5 minutes?
Drag n' Drop DVD Recommendations
This why I use a mainframe. Micros are just toys, bad enuff they have crummy hardware but their software is crap too.
The sun has risen this morning, and the Earth is rotating around its axis.
Nothing to see here - move along.
Make even shorter URLs - 8LN.org
I don't browse the web.
Be a real patriot: Question authority. Think for yourself. Formulate your own conclusions.
I use telnet and render the HTML mentally.
I use CowboyNeal. --oops.
A Good Troll is better than a Bad Human.
I use lynx....
Fact: The other browser is the safer one. *runs*
No kidding!!! What do you say at this point?
We wouldn't have this problem if we'd stuck with Netscape 1.0! But nooo, everyone wanted to see the fancy-pantsy javascript-based animations. Why in my day, javascript animations were called flip books, and we had to walk 15 miles in the snow to buy one. uphill. both ways.
Only to be stricken by sloppy internal perception code causing random synapse firings building to a pace that you suddenly just start breakdancing.
Oh, wait... it just seems that way. Carry on...
What, no link?
You say that in jest, but imagine the possibilities for exploits when/if we get the point of direct neural implants for communications and such. Just imagine, instead of porn popups, lockups, and reboots we'll have people suddenly yelling about viagara at the top of their lungs, freezing up and falling over mid-stride, and suddenly forgetting where they are.
:)
Maybe anyway
IE? I don't have that; I use Windows.
[an error occurred while processing this sig]
The holidays are a time for giving.
Now that you've RTFA, and you are now looking at the comments page, the staff of Slashdot and EWeek would like to thank you for visiting our web pages and giving us full control of your windows PCs.
Happy Holidays!
- Donny was a good bowler, and a good man.
You've met my grandfather, I take it.
Two of those three would apply to the current crop of US politicians. All three if you count Bob Dole.
I am pretty sure MS anti-spyware will stop this from launching
He who knows best knows how little he knows. - Thomas Jefferson
"I use telnet and render the HTML mentally."
You get used to it. I don't even see the code. All I see is blonde, brunette, redhead.
Georgia Tech, the leader in Chia(tm) technology.
Stay strong guys!
Don't let anyone or anything stop you from running IE. It's part of your identity.
The security nightmare of surfing with IE is a small price to pay for keeping up your image as a "Microsoft Guy"
Isn't Google's master plan to take over the world dependent upon people using AJAX? If IE has a critical flaw using javascript, and everyone has to turn it off, then nobody will be able to use Google's new products and... Hey wait a minute.
Best. Comment. Ever. Enjoy!
Windows has yet another "Open doors day - everyone warmly welcome" day! Jesus Christ, why do we let this happen?
FACT: Dolphins are Mammals.
FACT: China is big.
FACT: You're attempt to steer a slashdot discussion is like herding cats.
FACT: My inappropriate use of "you're" in the above sentence has ticked off a grammer nazi.
I phone the webmaster and ask him to read me the webpage.
Georgia Tech, the leader in Chia(tm) technology.
MS-DOS or DR-DOS? I don't know which one is worse.
I read that address as "awreckedford.com".
IRCers who talk to "Babes" have been using this technique for years!!!
DOH! http://validator.w3.org/check?uri=http%3A%2F%2Fwww .comm.utoronto.ca%2F%7Eeckford%2F
Result: Failed validation, 7 errors
"When life gives you lemons, don't make lemonade. Make life take the lemons back!" -- Cave Johnson
solution:
Buy sony cd,
install rootkit
rename Explorer to $sys$explorer.exe
The Code Ninja is swift with his tool, precise in his delivery, and deadly accurate in his execution.
Asylums are full of crashed brains.
Gettin' kinda fancy with the horizontal rule, ain't ya?
I wonder if you would have been so quick to share your website if this was your job.
It must be very difficult to be humble for people who are as great as you.
There is an exploit that my computer suffers from every day. It's called the 'Slash.ORG' worm, and it doesn't matter what kind of browser you use. Once the browser navigates to a certain website, it tends to stay there, refreshing as needed. It's called a DoPE attack, or 'Denial of Productivity for Employer.'
Dark Reflection
I always get depressed as the nights draw in towards the end of Hextober; how about you?
Real Daleks don't climb stairs - they level the building.
You're using the PHONE? Fool!
Cthulhu loves you.
You insensitive clod, I have to use Arachne with FreeDOS.
Join the Free Software Foundation
In Soviet Russia, the HTML render you!
Que Deus te de em dobro o que me desejas
[May God give you double that which you wish for me]
The phones are tapped.
US Mail, baby.
Didn't anyone see The Postman
Have you people not got the facts? Browsing the web using Microsoft Windows - and especially when using the excellent Microsoft Internet Explorer is proven to much more secure than using those namby-pamby, tree-hugging, communist hippy programs you can get, like that Linux thing and Firefox. I mean, no-one uses those things anyway, do they? I always make sure that I am fully patched, and that my anti-spyware and anti-virus programs and up to date. Every morning I check through my root-kit and trojan scanner reports, right after my defrag has finished. I know for a fact that this so-called exploit hasn't affected me in th [NO CARRIER]
Man, you people and your technology. I send a request to the web master via carrier pigeon, and he sends the contents of the site back.
Didn't anyone see The Postman
Sorry, the total costner of 0wnership was too high.