bugtraq - RE: MS web designers -- "What Security Initiative?"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 12 Jun 2004 11:53:26 +0000
From: "Morning Wood" <se_cur_ity@...mail.com>
To: nick@...us-l.demon.co.uk, bugtraq@...urityfocus.com,
   ntbugtraq@...tserv.ntbugtraq.com, full-disclosure@...ts.netsys.com
Subject: RE: MS web designers -- "What Security Initiative?"

logging into hotmail.com via the web i am now presented with "When-u-save" 
offer to install this worthless SPYWARE.
ref: http://www.pestpatrol.com/PestInfo/w/whenusave.asp

this is nearly as bad as malware deposited by browser bugs in IE that M$ is 
going after with such force as detailed in 
http://zdnet.com.com/2100-1105-5229707.html

wtf MS??? you allow this behavior from your own webpage, but yet are going 
after others who are using ( nearly the same without a conformation dialog ) 
this technique????????

m.wood

_________________________________________________________________
Watch the online reality show Mixed Messages with a friend and enter to win 
a trip to NY 
http://www.msnmessenger-download.click-url.com/go/onm00200497ave/direct/01/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html