full-disclosure - Re: Origin of the term "driveby download"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5.2.0.9.2.20030131095541.0340f2e8@mail-dnh.mv.net>
From: brian at pc-radio.com (Brian McWilliams)
Subject: Re: Origin of the term "driveby download"

At 07:49 AM 1/31/2003, you wrote:
>Yes, there is ActiveX warning message for a driveby download, but I
>think it is classic "blaming the victim" to call users who click the yes
>button as "stupid".  Most computer users today just see a computer as a
>tool and they are not programmers.  Vendors like Xupiter and Gator are
>working the percentages by relying on users to not read the warning
>boxes carefully enough and hope they hit "Yes" button to make the boxes
>go away as quick as possible.

I have a hard time feeling real outraged on behalf of the kind of users you 
are describing. Anyone who 1) visits the sort of sites where Xupiter is 
offered, and 2) has their IE security settings low, and 3) is in the habit 
of impatiently clicking "yes" to any prompt that comes their way ... well, 
that's like driving drunk while talking on a cell phone.

To protect these folks against this kind of scumware, perhaps we need the 
digital equivalent of air bags. When are antivirus products going to add 
detection for Xupiter et al?

Brian