full-disclosure - Firefox long URL field obfuscation vulnerability?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
From: khermansen at ht-technology.com (Kristian Hermansen)
Subject: Firefox long URL field obfuscation vulnerability?

This is a quick heads up for people who want to investigate it further.
At least on my Ubuntu system (warty), a URL with a significant amount of
data seems to "obfuscate" the URL field and not allow the end user to
properly identify the site to which they are connecting.  This could be
another potential way for spamming thieves to fool people.  Even worse,
I played around with it a bit and it seems that the text is wrapping
around back over the start of the URL box -- and if you are tricky
enough, you can even do some interesting overlays in the URL field to
make the end user think he has reached a valid site when he is actually
somewhere else.

The potential for abuse here seems obvious, but I am not sure if this is
common to the latest version and other factors.  I am asking for any
input from people that can reproduce this issue or have found other ways
to do devious things with it.  Try this URL in your Firefox browser and
see if you get the overlay problem that I am talking about:

http://www.google.com/search?q=%D0%94%D0%BE%D1%80%D0%BE%D0%B3%D0%B8%D0%
B5+%D0%B4%D1%80%D1%83%D0%B7%D1%8C%D1%8F%21%0A%0A%D0%9C%D1%8B+%D0%BF%D0%
BE%D0%B7%D0%B4%D1%80%D0%B0%D0%B2%D0%BB%D1%8F%D0%B5%D0%BC+%D0%B2%D0%B0%
D1%81+%D1%81+%D0%BD%D0%B0%D1%81%D1%82%D1%83%D0%BF%D0%BB%D0%B5%D0%BD%D0%
B8%D0%B5%D0%BC+%D1%81%D0%B0%D0%BC%D0%BE%D0%B3%D0%BE+%D1%83%D0%B4%D0%B8%
D0%B2%D0%B8%D1%82%D0%B5%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE+%D0%B8+%D0%
B2%D0%BE%D0%BB%D1%88%D0%B5%D0%B1%D0%BD%D0%BE%D0%B3%D0%BE+%D0%BF%D1%80%
D0%B0%D0%B7%D0%B4%D0%BD%D0%B8%D0%BA%D0%B0+-+%D0%9D%D0%BE%D0%B2%D0%BE%D0%
B3%D0%BE+%D0%B3%D0%BE%D0%B4%D0%B0+%D0%B8+%D0%B4%D0%B0%D1%80%D0%B8%D0%BC
+%D0%BD%D0%B0%D1%88%D1%83+%D0%BD%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE%D0%B4%D0%
BD%D1%8E%D1%8E+%D0%BE%D1%82%D0%BA%D1%80%D1%8B%D1%82%D0%BA%D1%83.%0A%0A%
D0%92+%D1%8D%D1%82%D0%BE%D0%BC+%D0%B3%D0%BE%D0%B4%D1%83+%D0%BF%D1%80%D0%
BE%D0%B8%D0%B7%D0%BE%D1%88%D0%BB%D0%BE+%D0%BE%D1%87%D0%B5%D0%BD%D1%8C+%
D0%B2%D0%B0%D0%B6%D0%BD%D0%BE%D0%B5+%D0%B4%D0%BB%D1%8F+%D0%BD%D0%B0%D1%
81+%D1%81%D0%BE%D0%B1%D1%8B%D1%82%D0%B8%D0%B5+-+%D1%87%D0%B8%D1%81%D0%BB
%D0%BE+%D0%B7%D0%B0%D1%80%D0%B5%D0%B3%D0%B8%D1%81%D1%82%D1%80%D0%B8%D1%
80%D0%BE%D0%B2%D0%B0%D0%BD%D0%BD%D1%8B%D1%85+%D0%BD%D0%B0+Mail.Ru+%D0%BF
%D0%BE%D0%BB%D1%8C%D0%B7%D0%BE%D0%B2%D0%B0%D1%82%D0%B5%D0%BB%D0%B5%D0%B9
+%D0%BF%D1%80%D0%B5%D0%B2%D1%8B%D1%81%D0%B8%D0%BB%D0%BE+20+%D0%BC%D0%B8%
D0%BB%D0%BB%D0%B8%D0%BE%D0%BD%D0%BE%D0%B2.+%D0%9C%D1%8B+%D1%81%D1%87%D0%
B8%D1%82%D0%B0%D0%B5%D0%BC+%D1%8D%D1%82%D0%BE+%D1%81%D0%B0%D0%BC%D0%BE%
D0%B9+%D0%B2%D0%B0%D0%B6%D0%BD%D0%BE%D0%B9+%D0%BE%D1%86%D0%B5%D0%BD%D0%
BA%D0%BE%D0%B9+%D0%BD%D0%B0%D1%88%D0%B5%D0%B9+%D1%80%D0%B0%D0%B1%D0%BE%
D1%82%D1%8B+%D0%B8+%D0%B1%D0%BB%D0%B0%D0%B3%D0%BE%D0%B4%D0%B0%D1%80%D0%
BD%D1%8B+%D0%B2%D0%B0%D0%BC+%D0%B7%D0%B0+%D1%82%D0%BE%2C+%D1%87%D1%82%
D0%BE+%D0%B2%D0%BE%D1%82+%D1%83%D0%B6%D0%B5+6+%D0%BB%D0%B5%D1%82+Mail.Ru
+%D0%BE%D1%81%D1%82%D0%B0%D0%B5%D1%82%D1%81%D1%8F+%D1%81%D0%B0%D0%BC%D0%
BE%D0%B9+%D0%BF%D0%BE%D0%BF%D1%83%D0%BB%D1%8F%D1%80%D0%BD%D0%BE%D0%B9+%
D0%BF%D0%BE%D1%87%D1%82%D0%BE%D0%B9+%D1%80%D0%BE%D1%81%D1%81%D0%B8%D0%
B9%D1%81%D0%BA%D0%BE%D0%B3%D0%BE+%D0%98%D0%BD%D1%82%D0%B5%D1%80%D0%BD%
D0%B5%D1%82%D0%B0.%0A%0A%D0%9C%D1%8B+%D1%81%D1%82%D0%B0%D1%80%D0%B0%D0%
BB%D0%B8%D1%81%D1%8C+%D0%B2+2004+%D0%B3%D0%BE%D0%B4%D1%83+%D1%81%D0%B4%
D0%B5%D0%BB%D0%B0%D1%82%D1%8C+%D0%B2%D1%81%D0%B5%2C+%D1%87%D1%82%D0%BE%
D0%B1%D1%8B+%D0%BE%D0%BF%D1%80%D0%B0%D0%B2%D0%B4%D0%B0%D1%82%D1%8C+%D0%
B2%D0%B0%D1%88%D0%B5+%D0%B4%D0%BE%D0%B2%D0%B5%D1%80%D0%B8%D0%B5.+%D0%9F%
D0%BE%D1%87%D1%82%D0%BE%D0%B2%D1%8B%D0%B9+%D1%8F%D1%89%D0%B8%D0%BA+%D0%
B2+%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D0%B5+%D1%82%D0%B5%D0%BF%D0%B5%
D1%80%D1%8C+%D0%BD%D0%B5%D0%BE%D0%B3%D1%80%D0%B0%D0%BD%D0%B8%D1%87%D0%
B5%D0%BD+%D0%BF%D0%BE+%D0%BE%D0%B1%D1%8A%D0%B5%D0%BC%D1%83.+%D0%97%D0%BD
%D0%B0%D1%87%D0%B8%D1%82%D0%B5%D0%BB%D1%8C%D0%BD%D0%BE+%D1%83%D0%BB%D1%
83%D1%87%D1%88%D0%B5%D0%BD%D0%BD%D1%8B%D0%B9+%D0%9F%D0%BE%D0%B8%D1%81%
D0%BA%40Mail.Ru+%D0%BE%D0%BF%D0%B5%D1%80%D0%B0%D1%82%D0%B8%D0%B2%D0%BD%
D0%BE+%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D1%82+%D0%BD%D0%B5%D0%BE%D0%B1%D1%
85%D0%BE%D0%B4%D0%B8%D0%BC%D1%8B%D0%B9+%D0%B2%D0%B0%D0%BC+%D0%B4%D0%BE%
D0%BA%D1%83%D0%BC%D0%B5%D0%BD%D1%82+%D0%B2+%D0%BB%D1%8E%D0%B1%D0%BE%D0%
B9+%D1%82%D0%BE%D1%87%D0%BA%D0%B5+%D0%BC%D0%B8%D1%80%D0%B0.+%D0%90+%D0%
BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0+Mail.Ru+%D0%90%D0%B3%
D0%B5%D0%BD%D1%82%2C+%D1%81%D1%82%D0%B0%D0%B2%D1%88%D0%B0%D1%8F+%D0%BF%
D0%B5%D1%80%D0%B2%D1%8B%D0%BC+%D0%BF%D0%BE%D0%BB%D0%BD%D0%BE%D1%86%D0%
B5%D0%BD%D0%BD%D1%8B%D0%BC+%D1%80%D0%BE%D1%81%D1%81%D0%B8%D0%B9%D1%81%
D0%BA%D0%B8%D0%BC+%D0%B8%D0%BD%D1%82%D0%B5%D1%80%D0%BD%D0%B5%D1%82-%D0%
BF%D0%B5%D0%B9%D0%B4%D0%B6%D0%B5%D1%80%D0%BE%D0%BC%2C+%D0%BF%D0%BE%D0%
B7%D0%B2%D0%BE%D0%BB%D0%B8%D1%82+%D0%B1%D0%B5%D0%B7+%D0%BF%D1%80%D0%BE%
D0%B1%D0%BB%D0%B5%D0%BC+%D0%B7%D0%B0%D0%B2%D0%B5%D1%81%D1%82%D0%B8+%D0%
BD%D0%BE%D0%B2%D1%8B%D1%85+%D0%B4%D1%80%D1%83%D0%B7%D0%B5%D0%B9+%D0%B8+%
D0%B4%D0%B0%D0%B6%D0%B5+%D0%BF%D0%BE%D0%BE%D0%B1%D1%89%D0%B0%D1%82%D1%8C
%D1%81%D1%8F+%D1%81+%D0%BD%D0%B8%D0%BC%D0%B8+%D0%B3%D0%BE%D0%BB%D0%BE%
D1%81%D0%BE%D0%BC+%D1%87%D0%B5%D1%80%D0%B5%D0%B7+%D0%98%D0%BD%D1%82%D0%
B5%D1%80%D0%BD%D0%B5%D1%82%2C+%D0%B3%D0%B4%D0%B5+%D0%B1%D1%8B+%D0%BE%D0%
BD%D0%B8+%D0%BD%D0%B8+%D0%BD%D0%B0%D1%85%D0%BE%D0%B4%D0%B8%D0%BB%D0%B8%
D1%81%D1%8C.%0A%0A%D0%9D%D0%B0%D0%B4%D0%B5%D0%B5%D0%BC%D1%81%D1%8F%2C+%
D1%87%D1%82%D0%BE+%D0%B2+%D0%B1%D1%83%D0%B4%D1%83%D1%89%D0%B5%D0%BC+%D0%
B3%D0%BE%D0%B4%D1%83+%D0%B2%D1%8B+%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%B5%
D1%82%D0%B5%D1%81%D1%8C+%D1%81+%D0%BD%D0%B0%D0%BC%D0%B8.+%D0%90+%D1%87%
D1%82%D0%BE%D0%B1%D1%8B+%D0%B2%D0%B0%D1%88%D0%B8+%D0%B6%D0%B5%D0%BB%D0%
B0%D0%BD%D0%B8%D1%8F+%D0%BE%D0%B1%D1%8F%D0%B7%D0%B0%D1%82%D0%B5%D0%BB%
D1%8C%D0%BD%D0%BE+%D1%81%D0%B1%D1%8B%D0%BB%D0%B8%D1%81%D1%8C%2C+%D0%BE%
D1%82%D0%BF%D1%80%D0%B0%D0%B2%D1%8C%D1%82%D0%B5+%D0%B8%D1%85+%D0%94%D0%
B5%D0%B4%D1%83+%D0%9C%D0%BE%D1%80%D0%BE%D0%B7%D1%83%21+%D0%9F%D1%80%D1%
8F%D0%BC%D0%BE%D0%B5+%D0%BF%D0%BE%D1%87%D1%82%D0%BE%D0%B2%D0%BE%D0%B5+%
D1%81%D0%BE%D0%BE%D0%B1%D1%89%D0%B5%D0%BD%D0%B8%D0%B5+%D1%81+%D0%BD%D0%
B8%D0%BC+%D1%83%D1%81%D1%82%D0%B0%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%
D0%BE+%D0%BD%D0%B0+%D0%BD%D0%B0%D1%88%D0%B5%D0%BC+%D0%BD%D0%BE%D0%B2%D0%
BE%D0%B3%D0%BE%D0%B4%D0%BD%D0%B5%D0%BC+%D0%BF%D1%80%D0%BE%D0%B5%D0%BA%
D1%82%D0%B5.%0A%0A%D0%A1%D1%87%D0%B0%D1%81%D1%82%D0%BB%D0%B8%D0%B2%D0%BE
%D0%B3%D0%BE+%D0%B2%D0%B0%D0%BC+%D0%9D%D0%BE%D0%B2%D0%BE%D0%B3%D0%BE+%
D0%B3%D0%BE%D0%B4%D0%B0%21+%0A%0A%25D0%2594%25D0%25BE%25D1%2580%25D0%
25BE%25D0%25B3%25D0%25B8%25D0%25B5%2B%25D0%25B4%25D1%2580%25D1%2583%
25D0%25B7%25D1%258C%25D1%258F%2521%250A%250A%25D0%259C%25D1%258B%2B%
25D0%25BF%25D0%25BE%25D0%25B7%25D0%25B4%25D1%2580%25D0%25B0%25D0%25B2%
25D0%25BB%25D1%258F%25D0%25B5%25D0%25BC%2B%25D0%25B2%25D0%25B0%25D1%
2581%2B%25D1%2581%2B%25D0%25BD%25D0%25B0%25D1%2581%25D1%2582%25D1%2583%
25D0%25BF%25D0%25BB%25D0%25B5%25D0%25BD%25D0%25B8%25D0%25B5%25D0%25BC%2B
%25D1%2581%25D0%25B0%25D0%25BC%25D0%25BE%25D0%25B3%25D0%25BE%2B%25D1%
2583%25D0%25B4%25D0%25B8%25D0%25B2%25D0%25B8%25D1%2582%25D0%25B5%25D0%
25BB%25D1%258C%25D0%25BD%25D0%25BE%25D0%25B3%25D0%25BE%2B%25D0%25B8%2B%
25D0%25B2%25D0%25BE%25D0%25BB%25D1%2588%25D0%25B5%25D0%25B1%25D0%25BD%
25D0%25BE%25D0%25B3%25D0%25BE%2B%25D0%25BF%25D1%2580%25D0%25B0%25D0%
25B7%25D0%25B4%25D0%25BD%25D0%25B8%25D0%25BA%25D0%25B0%2B-%2B%25D0%259D%
25D0%25BE%25D0%25B2%25D0%25BE%25D0%25B3%25D0%25BE%2B%25D0%25B3%25D0%25BE
%25D0%25B4%25D0%25B0%2B%25D0%25B8%2B%25D0%25B4%25D0%25B0%25D1%2580%25D0%
25B8%25D0%25BC%2B%25D0%25BD%25D0%25B0%25D1%2588%25D1%2583%2B%25D0%25BD%
25D0%25BE%25D0%25B2%25D0%25BE%25D0%25B3%25D0%25BE%25D0%25B4%25D0%25BD%
25D1%258E%25D1%258E%2B%25D0%25BE%25D1%2582%25D0%25BA%25D1%2580%25D1%258B
%25D1%2582%25D0%25BA%25D1%2583.%250A%250A%25D0%2592%2B%25D1%258D%25D1%
2582%25D0%25BE%25D0%25BC%2B%25D0%25B3%25D0%25BE%25D0%25B4%25D1%2583%2B%
25D0%25BF%25D1%2580%25D0%25BE%25D0%25B8%25D0%25B7%25D0%25BE%25D1%2588%
25D0%25BB%25D0%25BE%2B%25D0%25BE%25D1%2587%25D0%25B5%25D0%25BD%25D1%258C
%2B%25D0%25B2%25D0%25B0%25D0%25B6%25D0%25BD%25D0%25BE%25D0%25B5%2B%25D0%
25B4%25D0%25BB%25D1%258F%2B%25D0%25BD%25D0%25B0%25D1%2581%2B%25D1%2581%
25D0%25BE%25D0%25B1%25D1%258B%25D1%2582%25D0%25B8%25D0%25B5%2B-%2B%25D1%
2587%25D0%25B8%25D1%2581%25D0%25BB%25D0%25BE%2B%25D0%25B7%25D0%25B0%
25D1%2580%25D0%25B5%25D0%25B3%25D0%25B8%25D1%2581%25D1%2582%25D1%2580%
25D0%25B8%25D1%2580%25D0%25BE%25D0%25B2%25D0%25B0%25D0%25BD%25D0%25BD%
25D1%258B%25D1%2585%2B%25D0%25BD%25D0%25B0%2BMail.Ru%2B%25D0%25BF%25D0%
25BE%25D0%25BB%25D1%258C%25D0%25B7%25D0%25BE%25D0%25B2%25D0%25B0%25D1%
2582%25D0%25B5%25D0%25BB%25D0%25B5%25D0%25B9%2B%25D0%25BF%25D1%2580%
25D0%25B5%25D0%25B2%25D1%258B%25D1%2581%25D0%25B8%25D0%25BB%25D0%25BE%
2B20%2B%25D0%25BC%25D0%25B8%25D0%25BB%25D0%25BB%25D0%25B8%25D0%25BE%
25D0%25BD%25D0%25BE%25D0%25B2.%2B%25D0%259C%25D1%258B%2B%25D1%2581%25D1%
2587%25D0%25B8%25D1%2582%25D0%25B0%25D0%25B5%25D0%25BC%2B%25D1%258D%
25D1%2582%25D0%25BE%2B%25D1%2581%25D0%25B0%25D0%25BC%25D0%25BE%25D0%
25B9%2B%25D0%25B2%25D0%25B0%25D0%25B6%25D0%25BD%25D0%25BE%25D0%25B9%2B%
25D0%25BE%25D1%2586%25D0%25B5%25D0%25BD%25D0%25BA%25D0%25BE%25D0%25B9%2B
%25D0%25BD%25D0%25B0%25D1%2588%25D0%25B5%25D0%25B9%2B%25D1%2580%25D0%
25B0%25D0%25B1%25D0%25BE%25D1%2582%25D1%258B%2B%25D0%25B8%2B%25D0%25B1%
25D0%25BB%25D0%25B0%25D0%25B3%25D0%25BE%25D0%25B4%25D0%25B0%25D1%2580%
25D0%25BD%25D1%258B%2B%25D0%25B2%25D0%25B0%25D0%25BC%2B%25D0%25B7%25D0%
25B0%2B%25D1%2582%25D0%25BE%252C%2B%25D1%2587%25D1%2582%25D0%25BE%2B%
25D0%25B2%25D0%25BE%25D1%2582%2B%25D1%2583%25D0%25B6%25D0%25B5%2B6%2B%
25D0%25BB%25D0%25B5%25D1%2582%2BMail.Ru%2B%25D0%25BE%25D1%2581%25D1%
2582%25D0%25B0%25D0%25B5%25D1%2582%25D1%2581%25D1%258F%2B%25D1%2581%
25D0%25B0%25D0%25BC%25D0%25BE%25D0%25B9%2B%25D0%25BF%25D0%25BE%25D0%25BF
%25D1%2583%25D0%25BB%25D1%258F%25D1%2580%25D0%25BD%25D0%25BE%25D0%25B9%
2B%25D0%25BF%25D0%25BE%25D1%2587%25D1%2582%25D0%25BE%25D0%25B9%2B%25D1%
2580%25D0%25BE%25D1%2581%25D1%2581%25D0%25B8%25D0%25B9%25D1%2581%25D0%
25BA%25D0%25BE%25D0%25B3%25D0%25BE%2B%25D0%2598%25D0%25BD%25D1%2582%
25D0%25B5%25D1%2580%25D0%25BD%25D0%25B5%25D1%2582%25D0%25B0.%250A%250A%
25D0%259C%25D1%258B%2B%25D1%2581%25D1%2582%25D0%25B0%25D1%2580%25D0%
25B0%25D0%25BB%25D0%25B8%25D1%2581%25D1%258C%2B%25D0%25B2%2B2004%2B%
25D0%25B3%25D0%25BE%25D0%25B4%25D1%2583%2B%25D1%2581%25D0%25B4%25D0%
25B5%25D0%25BB%25D0%25B0%25D1%2582%25D1%258C%2B%25D0%25B2%25D1%2581%
25D0%25B5%252C%2B%25D1%2587%25D1%2582%25D0%25BE%25D0%25B1%25D1%258B%2B%
25D0%25BE%25D0%25BF%25D1%2580%25D0%25B0%25D0%25B2%25D0%25B4%25D0%25B0%
25D1%2582%25D1%258C%2B%25D0%25B2%25D0%25B0%25D1%2588%25D0%25B5%2B%25D0%
25B4%25D0%25BE%25D0%25B2%25D0%25B5%25D1%2580%25D0%25B8%25D0%25B5.%2B%
25D0%259F%25D0%25BE%25D1%2587%25D1%2582%25D0%25BE%25D0%25B2%25D1%258B%
25D0%25B9%2B%25D1%258F%25D1%2589%25D0%25B8%25D0%25BA%2B%25D0%25B2%2B%
25D1%2581%25D0%25B8%25D1%2581%25D1%2582%25D0%25B5%25D0%25BC%25D0%25B5%2B
%25D1%2582%25D0%25B5%25D0%25BF%25D0%25B5%25D1%2580%25D1%258C%2B%25D0%
25BD%25D0%25B5%25D0%25BE%25D0%25B3%25D1%2580%25D0%25B0%25D0%25BD%25D0%
25B8%25D1%2587%25D0%25B5%25D0%25BD%2B%25D0%25BF%25D0%25BE%2B%25D0%25BE%
25D0%25B1%25D1%258A%25D0%25B5%25D0%25BC%25D1%2583.%2B%25D0%2597%25D0%
25BD%25D0%25B0%25D1%2587%25D0%25B8%25D1%2582%25D0%25B5%25D0%25BB%25D1%
258C%25D0%25BD%25D0%25BE%2B%25D1%2583%25D0%25BB%25D1%2583%25D1%2587%
25D1%2588%25D0%25B5%25D0%25BD%25D0%25BD%25D1%258B%25D0%25B9%2B%25D0%259F
%25D0%25BE%25D0%25B8%25D1%2581%25D0%25BA%2540Mail.Ru%2B%25D0%25BE%25D0%
25BF%25D0%25B5%25D1%2580%25D0%25B0%25D1%2582%25D0%25B8%25D0%25B2%25D0%
25BD%25D0%25BE%2B%25D0%25BD%25D0%25B0%25D0%25B9%25D0%25B4%25D0%25B5%
25D1%2582%2B%25D0%25BD%25D0%25B5%25D0%25BE%25D0%25B1%25D1%2585%25D0%25BE
%25D0%25B4%25D0%25B8%25D0%25BC%25D1%258B%25D0%25B9%2B%25D0%25B2%25D0%
25B0%25D0%25BC%2B%25D0%25B4%25D0%25BE%25D0%25BA%25D1%2583%25D0%25BC%
25D0%25B5%25D0%25BD%25D1%2582%2B%25D0%25B2%2B%25D0%25BB%25D1%258E%25D0%
25B1%25D0%25BE%25D0%25B9%2B%25D1%2582%25D0%25BE%25D1%2587%25D0%25BA%
25D0%25B5%2B%25D0%25BC%25D0%25B8%25D1%2580%25D0%25B0.%2B%25D0%2590%2B%
25D0%25BF%25D1%2580%25D0%25BE%25D0%25B3%25D1%2580%25D0%25B0%25D0%25BC%
25D0%25BC%25D0%25B0%2BMail.Ru%2B%25D0%2590%25D0%25B3%25D0%25B5%25D0%25BD
%25D1%2582%252C%2B%25D1%2581%25D1%2582%25D0%25B0%25D0%25B2%25D1%2588%
25D0%25B0%25D1%258F%2B%25D0%25BF%25D0%25B5%25D1%2580%25D0%25B2%25D1%258B
%25D0%25BC%2B%25D0%25BF%25D0%25BE%25D0%25BB%25D0%25BD%25D0%25BE%25D1%
2586%25D0%25B5%25D0%25BD%25D0%25BD%25D1%258B%25D0%25BC%2B%25D1%2580%
25D0%25BE%25D1%2581%25D1%2581%25D0%25B8%25D0%25B9%25D1%2581%25D0%25BA%
25D0%25B8%25D0%25BC%2B%25D0%25B8%25D0%25BD%25D1%2582%25D0%25B5%25D1%
2580%25D0%25BD%25D0%25B5%25D1%2582-%25D0%25BF%25D0%25B5%25D0%25B9%25D0%
25B4%25D0%25B6%25D0%25B5%25D1%2580%25D0%25BE%25D0%25BC%252C%2B%25D0%25BF
%25D0%25BE%25D0%25B7%25D0%25B2%25D0%25BE%25D0%25BB%25D0%25B8%25D1%2582%
2B%25D0%25B1%25D0%25B5%25D0%25B7%2B%25D0%25BF%25D1%2580%25D0%25BE%25D0%
25B1%25D0%25BB%25D0%25B5%25D0%25BC%2B%25D0%25B7%25D0%25B0%25D0%25B2%
25D0%25B5%25D1%2581%25D1%2582%25D0%25B8%2B%25D0%25BD%25D0%25BE%25D0%
25B2%25D1%258B%25D1%2585%2B%25D0%25B4%25D1%2580%25D1%2583%25D0%25B7%
25D0%25B5%25D0%25B9%2B%25D0%25B8%2B%25D0%25B4%25D0%25B0%25D0%25B6%25D0%
25B5%2B%25D0%25BF%25D0%25BE%25D0%25BE%25D0%25B1%25D1%2589%25D0%25B0%
25D1%2582%25D1%258C%25D1%2581%25D1%258F%2B%25D1%2581%2B%25D0%25BD%25D0%
25B8%25D0%25BC%25D0%25B8%2B%25D0%25B3%25D0%25BE%25D0%25BB%25D0%25BE%
25D1%2581%25D0%25BE%25D0%25BC%2B%25D1%2587%25D0%25B5%25D1%2580%25D0%
25B5%25D0%25B7%2B%25D0%2598%25D0%25BD%25D1%2582%25D0%25B5%25D1%2580%
25D0%25BD%25D0%25B5%25D1%2582%252C%2B%25D0%25B3%25D0%25B4%25D0%25B5%2B%
25D0%25B1%25D1%258B%2B%25D0%25BE%25D0%25BD%25D0%25B8%2B%25D0%25BD%25D0%
25B8%2B%25D0%25BD%25D0%25B0%25D1%2585%25D0%25BE%25D0%25B4%25D0%25B8%
25D0%25BB%25D0%25B8%25D1%2581%25D1%258C.%250A%250A%25D0%259D%25D0%25B0%
25D0%25B4%25D0%25B5%25D0%25B5%25D0%25BC%25D1%2581%25D1%258F%252C%2B%
25D1%2587%25D1%2582%25D0%25BE%2B%25D0%25B2%2B%25D0%25B1%25D1%2583%25D0%
25B4%25D1%2583%25D1%2589%25D0%25B5%25D0%25BC%2B%25D0%25B3%25D0%25BE%
25D0%25B4%25D1%2583%2B%25D0%25B2%25D1%258B%2B%25D0%25BE%25D1%2581%25D1%
2582%25D0%25B0%25D0%25BD%25D0%25B5%25D1%2582%25D0%25B5%25D1%2581%25D1%
258C%2B%25D1%2581%2B%25D0%25BD%25D0%25B0%25D0%25BC%25D0%25B8.%2B%25D0%
2590%2B%25D1%2587%25D1%2582%25D0%25BE%25D0%25B1%25D1%258B%2B%25D0%25B2%
25D0%25B0%25D1%2588%25D0%25B8%2B%25D0%25B6%25D0%25B5%25D0%25BB%25D0%
25B0%25D0%25BD%25D0%25B8%25D1%258F%2B%25D0%25BE%25D0%25B1%25D1%258F%
25D0%25B7%25D0%25B0%25D1%2582%25D0%25B5%25D0%25BB%25D1%258C%25D0%25BD%
25D0%25BE%2B%25D1%2581%25D0%25B1%25D1%258B%25D0%25BB%25D0%25B8%25D1%
2581%25D1%258C%252C%2B%25D0%25BE%25D1%2582%25D0%25BF%25D1%2580%25D0%
25B0%25D0%25B2%25D1%258C%25D1%2582%25D0%25B5%2B%25D0%25B8%25D1%2585%2B%
25D0%2594%25D0%25B5%25D0%25B4%25D1%2583%2B%25D0%259C%25D0%25BE%25D1%
2580%25D0%25BE%25D0%25B7%25D1%2583%2521%2B%25D0%259F%25D1%2580%25D1%258F
%25D0%25BC%25D0%25BE%25D0%25B5%2B%25D0%25BF%25D0%25BE%25D1%2587%25D1%
2582%25D0%25BE%25D0%25B2%25D0%25BE%25D0%25B5%2B%25D1%2581%25D0%25BE%
25D0%25BE%25D0%25B1%25D1%2589%25D0%25B5%25D0%25BD%25D0%25B8%25D0%25B5%2B
%25D1%2581%2B%25D0%25BD%25D0%25B8%25D0%25BC%2B%25D1%2583%25D1%2581%25D1%
2582%25D0%25B0%25D0%25BD%25D0%25BE%25D0%25B2%25D0%25BB%25D0%25B5%25D0%
25BD%25D0%25BE%2B%25D0%25BD%25D0%25B0%2B%25D0%25BD%25D0%25B0%25D1%2588%
25D0%25B5%25D0%25BC%2B%25D0%25BD%25D0%25BE%25D0%25B2%25D0%25BE%25D0%
25B3%25D0%25BE%25D0%25B4%25D0%25BD%25D0%25B5%25D0%25BC%2B%25D0%25BF%
25D1%2580%25D0%25BE%25D0%25B5%25D0%25BA%25D1%2582%25D0%25B5.%250A%250A%
25D0%25A1%25D1%2587%25D0%25B0%25D1%2581%25D1%2582%25D0%25BB%25D0%25B8%
25D0%25B2%25D0%25BE%25D0%25B3%25D0%25BE%2B%25D0%25B2%25D0%25B0%25D0%25BC
%2B%25D0%259D%25D0%25BE%25D0%25B2%25D0%25BE%25D0%25B3%25D0%25BE%2B%25D0%
25B3%25D0%25BE%25D0%25B4%25D0%25B0%2521%2B%250A%250A%25D0%25A1%2B%25D0%
25BD%25D0%25B0%25D0%25B8%25D0%25BB%25D1%2583%25D1%2587%25D1%2588%25D0%
25B8%25D0%25BC%25D0%25B8%2B%25D0%25BF%25D0%25BE%25D0%25B6%25D0%25B5%
25D0%25BB%25D0%25B0%25D0%25BD%25D0%25B8%25D1%258F%25D0%25BC%25D0%25B8%
252C%250A%0A

Any feedback on your results would be great :-)  Thanks guys...
-- 
Kristian Hermansen <khermansen@...technology.com>