Re: AOL Abuses Internet Explorer's Trusted Sites Feature

From: PDQ (ugotme@here.inv)
Date: 10/31/02 

From: "PDQ" <ugotme@here.inv>
Date: Wed, 30 Oct 2002 20:38:30 -0500

Thanks, never thought of looking there for AOLHell. 

--
PDQ
--
"NeoSadist" <neos@dist> wrote in message
news:us0ohat9rcfb2@corp.supernews.com...
|
| "WRCsam" <UUsam@WTFhotmail.com.uu.WTF> wrote in message
| news:eh#ujvFgCHA.1768@tkmsftngp11...
| > AOL Abuses Internet Explorer's Trusted Sites Feature
| >
| > by WRCsam
| >
| > UUsam@hotmail.com
| >
| >
| >
| >
| >
| >
| >
| > There is a security and privacy vulnerability present when users (you)
| > install Winamp, Winamp3, Netscape, AOL Instant Messenger, and perhaps
| > other software sponsored by AOL.
| >
| >
| >
| > These software titles, sponsored by AOL, upon installation deliver
| > those pesky "Get free AOL" icons and links.  These pesky software
| > titles, sponsored by a pesky ISP, also feature unnecessary registry
| > clutter, such as Nullsoft\\Winamp3\\AOD\\ (in the case of Winamp3).
| > Hai!  My friends, these are just the things the average user sees!
| >
| >
| >
| > The security and privacy issues arise when these AOL sponsored
| > programs install into your Internet Explorer's Trusted Site List their
| > site, http://free.aol.com/.  This gives them full access to your
| > build-in and precious Internet Explorer security vulnerabilities.
| > They can run an Active-X control on your machine with full security
| > privileges without you knowing it!  They can identify one PC from
| > another PC visiting their site!  Hell, they can do whatever is
| > permitted in your Internet Explorer's Security//Trusted Sites
| > settings - EVERYTHING!
| >
| >
| >
| > What can you do?
| >
| >
| >
| > If you cannot live without those pesky trashsoft clutter, there are
| > two things you should do to protect yourself.
| >
| >
| >
| > a)  Edit your Trusted Sites list in Internet Explorer settings, remove
| > http://free.aol.com/ and other sites you know nothing about.
| >
| > b)  "Reset" your Trusted Sites profile to MEDIUM.  (done in Internet
| > Explorer settings//Security)
| >
| >
| >
| >
| >
| >
| >
| > WRCsam
| >
| > 10/30/2002 MDCC-Wolfson, Miami, FL
| >
| > GOOD YEAR NASCAR VIC
| >
| >
|
|
| Hell yeah it does.  If you ever install anything that puts a shortcut on
| your computer for "try AOL", etc, it puts itself in the trusted site
without
| your permission.  I find that all the time.  I usually delete it from
there
| and put it in the restricted zone lol.
| AoHell is probably one of the worst things to happen to the internet as a
| whole.
|
|

Relevant Pages

  • Anyone up for a challenge?
    ... Internet connection. ... cracker is somehow using it or relying on it for something. ... A funny thing I saw today, was that when the MSIE security was set to ... the "can not find server" white page, while the internal AOL browser ...
    (comp.security.firewalls)
  • Re: Unwanted Popups
    ... that still haunts the Internet. ... the security gap represented by these messages is particularly ... Messenger Service of Windows ... This is because AOL is an on-line ...
    (microsoft.public.windowsxp.security_admin)
  • Re: AOL Abuses Internet Explorers Trusted Sites Feature
    ... > AOL Abuses Internet Explorer's Trusted Sites Feature ... > There is a security and privacy vulnerability present when users ...
    (microsoft.public.security)
  • Re: AOL Abuses Internet Explorers Trusted Sites Feature
    ... > AOL Abuses Internet Explorer's Trusted Sites Feature ... > There is a security and privacy vulnerability present when users ...
    (microsoft.public.windowsxp.security_admin)
  • Re: AOL Abuses Internet Explorers Trusted Sites Feature
    ... > AOL Abuses Internet Explorer's Trusted Sites Feature ... > There is a security and privacy vulnerability present when users ...
    (microsoft.public.win2000.security)