Skip to main content

broadband - News - Update on the IE vulnerability

Some facts:
An update on the recently reported IE vulnerability that lets people create fake sites that look real and disguise their true address. You can see the bug in action using this hoax site: here (designed by us). If you are on IE, and visit the 'site', your Address bar will be wrong (say symantec.com). But your status bar, once in the page, may show something is bogus. If you don't believe it is not Symantec, click the privacy link at the bottom of the page.

You can also see a demo of faking a secure page with padlock and valid certificate (but not one from paypal): here.

Some facts about the vulnerability:
# Once at a fake site, only File..Properties will reveal a strange URL that does not agree with the Address bar.
# It appears that basically all windows MSIE versions are vulnerable.
# If you use MSIE 'enhancers' such as IRider, you may be protected from the problem.
# With java script enabled, it is trivial for the hoax site to modify the MSIE 'Status bar' to show whatever it wishes.
# Examples have been posted of mostly obscuring the tell-tale info in the IE status bar at the bottom, after you are on a hoax site, even with javascript (Active-Scripting) turned off. "

Comments

Popular posts from this blog

At USDA, the Mouse Is in the House

(washingtonpost.com) : "Employees at the Department of Agriculture's main cafeteria were just sitting down to lunch on Friday when security guards ordered everyone in the huge eatery to leave. Al Qaeda? Bomb scare? No. Mouse droppings. The D.C. Department of Health closed the cafeteria for failing to pass inspection. Yes, the USDA, home to the Animal and Plant Health Inspection Service, the meat and poultry inspectors -- the agency that is part of the federal system for protecting the nation's food supply, was in violation of the D.C. Health Code. There were several citations, according to the inspection report, including: 'water leaking excessively' in the ceiling, employees not wearing hair restraints, and inadequate cleaning of the inside of ice machines, cabinets, surfaces and equipment. The biggest problem, however, seemed to be mouse droppings found everywhere -- in the dry storage room, by the salad bar, behind the ovens, near the serving line, ...

Artist turns animals into everyday objects

Ananova - A Chilean artist is making a name for herself with an exhibition in which stuffed animals are transformed into household objects. Artworks on display include a chick turned into a lamp, and 'sheep bag' - a lamb carcass fitted with handles. Artist Caterina Purdy says her exhibition at the Experimental Arts Centre in Santiago is intended to be humorous but also makes a serious point. She told Las Ultimas Noticias online: 'It is possible to see my work as something scary, but I find it beautiful. 'There is also irony and humour in my objects as well as a criticism of the way animals are treated by society.'"
BW Online | March 1, 2004 | Software : "As Stephen and Deepa emerge this summer from graduate school -- one in Pittsburgh, the other in Bombay -- they'll find that their decisions of a half-decade ago placed their dreams on a collision course. The Internet links that were being pieced together at the turn of the century now provide broadband connections between multinational companies and brainy programmers the world over. For Deepa and tens of thousands of other Indian students, the globalization of technology offers the promise of power and riches in a blossoming local tech industry. But for Stephen and his classmates in the U.S., the sudden need to compete with workers across the world ushers in an era of uncertainty. Will good jobs be waiting for them when they graduate? 'I might have been better served getting an MBA,' Stephen says."