RE: DANGER ZONE: Internet Explorer

http-equiv_at_excite.com
Date: 12/29/03

  • Next message: Chintan Trivedi: "Cross Site Scripting vulnerability in miniBB 1.7 (latest) and earlier" 
    To: <bugtraq@securityfocus.com>
Date: Mon, 29 Dec 2003 19:38:35 -0000

    > You can read more about IE Security Settings at
    >
    >
    http://www.microsoft.com/windows/ie/using/howto/security/settings.asp
    >
    > from which we can also read about the Trusted Zone that you should:
    >
    > "Add a site to this zone only if you trust that it would never
    cause
    > harm to your computer."
    >
    > Giving any site additional executional privileges means that you
    are
    > extending your level of trust. You are trusting that the site in
    > question does not get compromised and have its content replaced
    with
    > malicious code, and you are trusting that the site does not have
    any XSS
    > errors that would allow harmful code injection into the HTML
    stream.

    It doesn't actually say that. From the link you provided it says is:

    "For example, you might put well-known entertainment or shopping
    sites in the Trusted sites zone with its low levels of security."

    You're saying what we are saying and illustrating, not what they are
    saying.

    That's the whole point.

    See what I am saying. 

    -- 
http://www.malware.com
  • Next message: Chintan Trivedi: "Cross Site Scripting vulnerability in miniBB 1.7 (latest) and earlier"

    Relevant Pages

    • DANGER ZONE: Internet Explorer
      ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
      (NT-Bugtraq)
    • DANGER ZONE: Internet Explorer
      ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
      (Bugtraq)
    • [Full-Disclosure] DANGER ZONE: Internet Explorer
      ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
      (Full-Disclosure)
    • [Full-Disclosure] RE: DANGER ZONE: Internet Explorer
      ... > from which we can also read about the Trusted Zone that you should: ... > extending your level of trust. ... You're saying what we are saying and illustrating, ...
      (Full-Disclosure)
    • Re: Very Critical issue
      ... Since that you're able to recreate the trust that means that the DC that was used to create the trust is able to communicate and validate the trust. ... are the clients using that same DC/DNS or are they querying a different DC/DNS that may has issues in their DNS secondary Zone? ... was at that time that the clients started with issues when trying to access to the other servers in the other forest? ...
      (microsoft.public.windows.server.active_directory)
    • Quantcast