Zone-Spoofing Fixed for IE 7 Home Users

Posted by Zonk on Friday December 9, 2005 @04:43AM from the i-can-sleep-better-tonight dept.

BeanBunny writes "The IE 7 dev team has essentially removed the intranet zone for Home users, resulting in a Web browser that is effectively invulnerable to a zone-spoofing attack. This security feature does not exist, however, on any installation that is part of a managed network. It also does not exist if you manually change the permissions on your Internet zone. However, in Windows Vista, both zones will be run in a 'protected mode,' something that allegedly prevents the invisible installation of code."

1 of 115 comments (clear)

Re:Protected Mode by Anonymous Coward · 2005-12-09 04:50 · Score: 0, Troll

Listen, you clueless zealot: FF-extensions are in no way restricted

They are exactly as protected as ActiveX, which is to say: not at all.

Please get it into your head; I know you have been brainwashed by the professional Mozilla-bloggista, but at least try to get a hint of reality.

Thank you for you efforts.