full-disclosure - A Popup! In Mozilla!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <A81B7B00-DAD8-11D8-A520-000D93C0F38C@teknovis.com>
From: andfarm at teknovis.com (Andrew Farmer)
Subject: A Popup! In Mozilla!

On 20 Jul 2004, at 21:13, James Woodcock wrote:
> This might seem like it should be going to a webdev list, but there's 
> a possible security implication, so here goes;
>
> http://2-spyware.com/file-cnfrm-exe.html
>
> In Mozilla 1.5 and FireFox 0.9 with the pop-up blocker turned on, I 
> get a pop-up! It's purporting to be an important notice from my 
> Network Administrator - you'll probably recognise it;
>
> http://2-spyware.com/images/2SPYRR1C.gif

Surprise! It's not actually a popup - just an image floated above the 
web page. Annoying, yes, but not an actual window, and therefore not 
really a popup (at least, not one of the sort that Mozilla tries to 
block).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040720/7f57e478/PGP.bin