IE security patch nixes some apps

TalkBack 26 of 52:

Next »

« Previous

• Thread View
• Flat View

Addendum

Did I mention that Robert Lemos, the wonderfully astute author of this piece of garbage, didn't even mention the IE flaw that caused the change in the first place? You'd think he'd do some research before the decided to write an article.

Here's the link to the flaw on MS's site, for those of you wondering what I'm talking about:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q834489

Here's the telling part:

##################################################
A malicious user could also use this URL syntax to create a hyperlink that appears to open a legitimate Web site but actually opens a deceptive (spoofed) Web site. For example, the following URL appears to open http://www.wingtiptoys.com but actually opens http://example.com:

http://www.wingtiptoys.com@example.com


Note In this case, Internet Explorer 6 Service Pack 1 (SP1) and Internet Explorer 6 for Windows Server 2003 only display "http://example.com" in the Address bar. However, earlier versions of Internet Explorer display "http://www.wingtiptoys.com@example.com" in the Address bar.
##################################################

You will note that even MS has minimized the explanation that a bug in IE is the actual reason for the patch - not the feature itself. Nice cover job Bill! Do you really thing we're that stupid out here???

Posted by: TrollSlayer   Posted on: 02/05/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Tuning Oracle on Windows for Maximum Performance on PowerEdge Servers Dell Tuning is the art and science of modifying and reconfiguring your system ... Download Now
• Dell Helps Medical University of South Carolina Bring the Intelligent Classroom to Life Dell Established in 1824, Medical University of South Carolina (MUSC) is one of ... Download Now
• Get top-ranked Novell support for Red Hat at 50% less Novell A simplified IT environment isn't just less complex, it's more reliable. ... Download Now