lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
From: Zach.Forsyth at kiandra.com (Zach Forsyth) Subject: Microsoft's fix for URL containing username:password@ obfuscation After reading through the MS advisory in more detail it doesn't actually mention ftp at all. This was kindly pointed out by several FD readers :) I will wait and see if the patch just "fixes" http and https before worrying about it in earnest. And for people saying don't use IE, if you aren't the sole admin on the server you don't have the choice to install other apps. Believe me if I could install something else I would just put a real ftp app and firebird on there and not have to ask silly questions on FD. Cheers z