Time left in Bush's term

Days
Hours
Min.
Sec.
Countdown clock provided by BushsLastDay.com

Project Insomnia

Project Insomnia is many things, but in this context it is simply a "braindump" of whatever I happen to be thinking/reading/watching/doing at the moment. Parental guidance suggested.

Wednesday, June 30, 2004

Yes, another one

So not only can Microsoft (apparently) not build a secure, safe Web browser, they don't even bother doing regression testing. Slick, guys. This is a particularly nasty one:
According to the latest bulletin, the vulnerability affects people who have multiple IE browsers open. Through one of the open browsers, hackers can change the content of another Web site without users ever knowing that it has been altered.

Using this attack method, hackers could insert links into legitimate Web pages and direct people to malicious sites where they could solicit personal information such as bank account or credit card information. Because the link comes from a legitimate and trusted site, victims may not realize they have been redirected to a harmful site. Hackers could also insert links that would trick users into downloading malicious software.
So, for example, you have one IE window open to a site which is (knowingly or not) carrying the malicious code to exploit this vulnerability, and another window on Windows Update. The vulnerability makes it possible for the evil site to write new content onto the Windows Update window. Such as rewriting download links to point to infected or trojaned files.
|| Andrew, 3:47 PM || ||

"Project Insomnia" and "project-insomnia.com" ™ & SM; site contents © Andrew Rich except where noted.