Security researcher keeps "Carpet Bomb" attack alive, despite patch

TalkBack 6 of 14:

Next »

« Previous

• Thread View
• Flat View

Is the attack really still "alive" ?

Re-read BK's blog:

"... Safari???s behavior affected more than just IE. In fact, I???ve discovered a way to use the Safari???s carpet bomb in conjunction with Firefox to steal user files from the local file system. Even though Apple has patched the carpet bomb..."


Note that BK uses the past tense "affected." And also states that Apple has patched the carpet bomb. I believe the point is that it's not just Safari + IE that can provide a blended threat. But rather Safari + [foo] can be dangerous, IFF the version of Safari being used downloads files automatically.

Posted by: forrestgump2000@...   Posted on: 06/21/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now