AOL Abuses Internet Explorer's Trusted Sites Feature

From: WRCsam (UUsam@WTFhotmail.com.uu.WTF)
Date: 10/30/02 

From: "WRCsam" <UUsam@WTFhotmail.com.uu.WTF>
Date: Wed, 30 Oct 2002 16:34:03 -0500

AOL Abuses Internet Explorer's Trusted Sites Feature

by WRCsam

UUsam@hotmail.com

There is a security and privacy vulnerability present when users (you)
install Winamp, Winamp3, Netscape, AOL Instant Messenger, and perhaps
other software sponsored by AOL.

These software titles, sponsored by AOL, upon installation deliver
those pesky "Get free AOL" icons and links. These pesky software
titles, sponsored by a pesky ISP, also feature unnecessary registry
clutter, such as Nullsoft\\Winamp3\\AOD\\ (in the case of Winamp3).
Hai! My friends, these are just the things the average user sees!

The security and privacy issues arise when these AOL sponsored
programs install into your Internet Explorer's Trusted Site List their
site, http://free.aol.com/. This gives them full access to your
build-in and precious Internet Explorer security vulnerabilities.
They can run an Active-X control on your machine with full security
privileges without you knowing it! They can identify one PC from
another PC visiting their site! Hell, they can do whatever is
permitted in your Internet Explorer's Security//Trusted Sites
settings - EVERYTHING!

What can you do?

If you cannot live without those pesky trashsoft clutter, there are
two things you should do to protect yourself.

a) Edit your Trusted Sites list in Internet Explorer settings, remove
http://free.aol.com/ and other sites you know nothing about.

b) "Reset" your Trusted Sites profile to MEDIUM. (done in Internet
Explorer settings//Security)

WRCsam

10/30/2002 MDCC-Wolfson, Miami, FL

GOOD YEAR NASCAR VIC

Relevant Pages

  • AOL Abuses Internet Explorers Trusted Sites Feature
    ... AOL Abuses Internet Explorer's Trusted Sites Feature ... install Winamp, Winamp3, Netscape, AOL Instant Messenger, and perhaps ... those pesky "Get free AOL" icons and links. ...
    (microsoft.public.windowsxp.security_admin)
  • AOL Abuses Internet Explorers Trusted Sites Feature
    ... AOL Abuses Internet Explorer's Trusted Sites Feature ... install Winamp, Winamp3, Netscape, AOL Instant Messenger, and perhaps ... those pesky "Get free AOL" icons and links. ...
    (microsoft.public.security)
  • Re: RED Xs everywhere!
    ... Pictures are not displayed in Internet Explorer ... Many of these programs block Javascript, which is often used to pop up login windows and create rollover graphics. ... AOL Users with different versions: ... Click Delete Files under Temporary Internet Files and then press OK button to delete all items in the Temporary Internet Files folder. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: AOL to start filesharing network for WB tv shows!
    ... The best way to fix AOL is to just close the doors on that part of their ... >> Warner Brothers is preparing a major new Internet service that will let ... >> The Internet commercials cannot be skipped. ... >> America Online, which is making a broad push into Internet video, will ...
    (alt.video.dvd)
  • Letter
    ... An open letter to AOL: ... which is a threat to the free and open Internet. ... filters and go directly to AOL members' inboxes. ... A pay-to-send system won't help the fight against spam - in fact, ...
    (alt.privacy)