full-disclosure - .hta virus analysys

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1069355908.19155.27.camel@Star.BerthoudWireless.net>
From: security at 303underground.com (Scott Taylor)
Subject: .hta virus analysys

On Thu, 2003-11-20 at 11:44, Maxime Ducharme wrote:
> More info on Microsoft's website :
> http://msdn.microsoft.com/library/default.asp?url=/workshop/author/hta/overview/htaoverview.asp
> 
> (URL may be wrapped)
> 
> Ciao
> 
> ---------------------------------------------------------------
>   Maxime Ducharme
>   Administrateur reseau, Programmeur
>   Pandore-Design [http://www.pandore-design.com]

Wow, Microsoft just has no end to the entertainment. Thats a great
article. "HTAs...are trusted and display only the menus, icons,
toolbars, and title bars the Web Developer creates...all the power of
IE...without enforcing the strict security model..."

When did IE, or Outlook, or Windows ever enforce a strict security
model... or even a loose one?  Well, good thing they offer solutions to
help developers get around such security inconveniences. 

I guess they really do have the market cornered on incompetent
programming practices.

--
Scott Taylor - <security@...underground.com> 

 ohshit my comp is smoking
 i have to go
<-- KillerSpaz has quit (Remote closed the connection)
 kids, here's why you shouldn't overclock