Re: MicroMonopoly aids Terrorism?

From: John Harvey (harveydad_at_hotmail.com)
Date: 01/24/04 

Date: Sat, 24 Jan 2004 11:53:16 -0800

It's the links at the bottom that demonstrate the vulnerability...

John 

--
Go! Canucks, Go!
http://www.canucks.com
"Tedd Riggs" <T_Riggs@MSN,C0M> wrote in message
news:ewhoWjq4DHA.984@TK2MSFTNGP11.phx.gbl...
> I'm confused, when I clicked the link below it goes right to the FDIC (the
> real one) or am I missing something (that's always possible,.,,,)
>
> -- 
> Tedd Riggs
> PDA Square Content Developer
> www.pdasquare.com
>
>
> "kurttrail" <dontemailme@anywhereintheknownuniverse.org> wrote in message
> news:u1OvJWq4DHA.2580@TK2MSFTNGP11.phx.gbl...
> > "[T]he link is formatted to take advantage of an Internet Explorer flaw
> > that allows an attacker to hide the true destination of the link; in
this
> > case, the address bar in Internet Explorer displays "www.fdic.gov,"
while
> > the actual Web site is at a different address in Pakistan." -
> > http://zdnet.com.com/2100-1105_2-5146716.html?tag=zdfd.newsfeed
> >
> > And I wonder who in Pakistan would want to know about the financial
> details
> > about American citizens?  Who in Pakistan would want to exploit the
fears
> of
> > the American populace for their own nefarious purposes?  Who, indeed?!
> >
> > Is MS glacial response to fixing the address bar flaw also helping
> > terrorists fund future attacks on the innocents?
> >
> > Stop dragging your feet MS, people are now possibly being terrorized in
> > their homes because of your Swiss cheese software!  Get a temp fix out
> that
> > informs people of the misdirection at the very least, if it's really
that
> > effin' hard to fix fully.
> >
> > PROTECT YOUR CUSTOMERS FROM YOUR MISTAKE, *NOW*!
> >
> > This should be a lesson to everyone why you can't put all of computer
> > security eggs in one monopolistic basket!
> >
> > Demonstrations of the Address bar vulnerability:
> >
> > http://www.microscum.com/misc/devil/
> >
> > http://www.microscum.com/misc/intransigence/intransigence.htm
> >
> > Download & setup up Mozilla as your default browser, that way when you
> click
> > on a link in email, you'll know what website you're really being taken
to.
> >
> > http://mozilla.org/download.html
> >
> > Protect yourself, because MS's desktop monopoly gives them absolutely no
> > incentive to fix their own mistakes for their monopoly locked-in
> customers!
> >
> > There should be an investigation into how MS's desktop monopoly has
> weakened
> > the safety of the general public!
> >
> > -- 
> > Peace!
> > Kurt
> > Self-anointed Moderator
> > microscum.pubic.windowsexp.gonorrhea
> > http://microscum.com
> > "Trustworthy Computing" is only another example of an Oxymoron!
> > "Produkt-Aktivierung macht frei!"
> >
> >
>
>

Relevant Pages

  • Re: [openssh-unix-announce] Re: Upcoming OpenSSH vulnerability (fwd)
    ... >>apparently it's so complicated that you can't fix it right away on your ... details of the vulnerability now: the black hats could use the ... OpenSSH version is the most straightforward solution. ... In my opinion, the advantages of immediate disclosure outweigh the ...
    (FreeBSD-Security)
  • Re: DCOM Hotfix breaks our software
    ... There was a workaround before the fix came out. ... vulnerability for the time being. ... DCOM Hotfix breaks our software ... Checked by AVG anti-virus system. ...
    (Security-Basics)
  • Re: ~/.login_conf disabling exact reasons wanted
    ... This vulnerability is not a hoax--spreading this kind of mis-information ... well as FreeBSD 5.0-CURRENT. ... You can expect a security ... the time to properly evaluate a complete fix would be non-trivial (I would ...
    (FreeBSD-Security)
  • Re: [Full-Disclosure] No Subject (re: openssh exploit code?)
    ... Now let's say you get a severe thunderstorm WATCH. ... not every vulnerability requires ... information and mitigating risk. ... delaying the fix, or even of not doing the fix at all sometimes. ...
    (Full-Disclosure)
Quantcast