full-disclosure - Re: Internet Explorer URL parsing vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031210180054.6444.qmail@web60809.mail.yahoo.com>
From: sgmasood at yahoo.com (S G Masood)
Subject: Re: Internet Explorer URL parsing vulnerability

--- Clint Bodungen <clint@...ureconsulting.com> wrote:
> Please see my original post... oh wait... I'll paste
> it.
> 
> I don't really think it will make that much of a
> difference their profits
> considering anyone dumb enough to fall for those
> scams isn't going to know
> the difference between an IP address in the URL box
> and a "spoofed" domain.

Since you are posting this for the second time:

There are many people who have been told to check that
the URL matches the page displayed before entering any
sensitive information. Like, if they are seeing the
paypal page, they are told to check the address bar to
see if it shows http://paypal.com and not
http://paypa1.com, for instance. Many papers on
spoofing mention this as if it is an infallible method
for checking the authenticity of the page. Such people
will fall for these exploits.

Hey, to be very honest, if this was 0day and the spoof
was well constructed, even you and me would probably
fall for it. ;D

Anyways, it wont make a difference to the "click
all-fill all" zombies you are talking about. :)

--
S.G.Masood

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/