full-disclosure - Re: Proxy Autoconfiguration and Internet Explorer Zones

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 11 Jul 2008 12:31:56 +1000
From: Paul Szabo <psz@...hs.usyd.edu.au>
To: elazar@...hmail.com, full-disclosure@...ts.grok.org.uk
Subject: Re: Proxy Autoconfiguration and Internet Explorer
	Zones

Elazar,

> ... Internet Explorer [with] proxy auto-configuration ...
> The pac file specifies a direct connection for a specific sub-net.
> ... ending up in the Local Intranet zone ...

When going to Tools InternetOptions Security LocalIntranet Sites,
my IE7 has all of
  Include all local (intranet) sites not listed in other zones
  Include all sites that bypass the proxy server
  Include all network paths (UNCs)
selected/ticked. Would unticking the second (or all) fix this?
(I do not know whether those are default settings; that last setting
seems dangerous or at least counter-intuitive.)

Cheers,

Paul Szabo   psz@...hs.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/