full-disclosure - another product affected by recent MS IE '@' patch

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: davidf at gfi.com (David Farinic)
Subject: another product affected by recent MS IE '@' patch

>martin f krafft <madduck@...duck.net> wrote:

>> In Germany, and maybe in other parts of the world, some providers
>> are attracting customers by announcing webpage packages where email
>> address == web address. so, john@....de is the email, and
>> john@....de is the website, while jane@....de may be the website of
>> john's wife.

>From: Nick FitzGerald [mailto:nick@...us-l.demon.co.uk]
>Well silly them.

>What kind of technical support can you expect from a "technology 
>company" that deliberately flouts the standards of the technology it 
>employs and provides a service based on known incorect and non-
>standards conforming behavior in a generally available software 
>product it has no control over?

Company which is exploring current technology  not just obey masses that
what internet is about ... if you run any company on the internet u know
that creativity is that what counts and making things easier 4 ppl is
part of their job as well.
This "feature" has been adopted because it was easy 4 ppl and saved them
time increasing there productivity. Unfortunately sometimes increasing
of productivity means decreasing level of security and we might get such
setbacks but it's not reason to not go forward.

Regards David|F

This mail was content-checked for malicious code and viruses
by GFI MailSecurity. GFI MailSecurity provides email content 
checking, exploit detection and anti-virus for Exchange & 
SMTP servers. Spam, viruses, dangerous attachments and
offensive content are removed automatically. Key features 
include: Multiple virus engines; Email content & attachment 
checking; Exploit shield - email intrusion detection & defence; 
Email threats engine - analyses & defuses HTML scripts, 
.exe files & more. 

In addition to GFI MailSecurity, GFI also produces the GFI 
FAXmaker fax server & GFI LANguard network security product 
ranges. For more information on our products, please visit 
http://www.gfi.com. This disclaimer was sent by GFI MailEssentials 
for Exchange/SMTP.