Safari "Carpet Bomb" Attack Still a Risk

SecureThroughObscure writes "Just a short time after Apple's recent acknowledgment of and patch for the Safari Carpet Bomb 'blended' IE flaw, Microsoft researcher Billy Rios shows that Safari is still useful in a blended attack, this time with Firefox 2/3. (ZDNet's Nate McFeters also spread the word.) Rios claimed that he is able to use Carpet Bomb, despite the recent patch, to steal arbitrary files from victims who also have Firefox 2/3 installed. Both Rios and McFeters pointed out that Apple, which took some heat for not originally patching, actually did a good job of addressing the issue, as the code execution angle was not originally understood (the details came out later). Rios is withholding details of the new attack vector until Apple has had time to patch or respond to this issue."

Comments

Yes, we are all sick of this, so stop it.

[Macthorpe]

You're right, everyone is tired of this conversation. So why don't you JUST FUCKING STOP.

Seriously, it's old now. If you want to avoid being modded down for shilling yourself, why don't you stop fucking shilling yourself. Pick an account, any account. Maybe Odder, seeing as it seems to have the most karma right now. After that, stop lying and talking bollocks and you may find people start respecting you again. Until then, cut the shit and stop whining, just because people have figured out this pathetic little game of yours.

It would be nice to read through the comments on an article on Slashdot without having to read 5, 6, 7 posts of yours in a row talking to each other as if they were adding value to whatever point you're making.

Am I the only one?

[Swift2001]

I'm finding this new messaging system well-nigh impossible to use.