full-disclosure - Question about the new Xupiter toolbar

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5.2.0.9.2.20030130163022.033dd710@mail-dnh.mv.net>
From: brian at pc-radio.com (Brian McWilliams)
Subject: Question about the new Xupiter toolbar

At 12:40 PM 1/30/2003, Richard M. Smith wrote:
>Hi,
>
>Has anyone looked into this new Xupiter toolbar to see how it is being
>installed on people's computer?  In particular is it using some IE
>security hole for the install or does it just use the standard ActiveX
>drive-by download mechanism?

Richard, try it yourself? Go to

http://www.xupiter.com/search2/install/install.html

Even with IE set to the "default"  (medium) security setting for the 
Internet zone, you should get a pop-up prompting whether you want to 
install Xupiter.

Hardly a "driveby" download. Maybe there are other instances of the ActiveX 
out there that work differently. But I'm told that IE by default prompts 
before installing signed ActiveX.

In other words, you have to *lower* Microsoft's default security settings 
(seldom a good idea) to get a drive-by install.

Brian