full-disclosure - Re: Proxy Autoconfiguration and Internet Explorer Zones

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20080711034200.0C6D215803E@mailserver6.hushmail.com>
Date: Thu, 10 Jul 2008 23:41:59 -0400
From: "Elazar Broad" <elazar@...hmail.com>
To: full-disclosure@...ts.grok.org.uk, psz@...hs.usyd.edu.au
Subject: Re: Proxy Autoconfiguration and Internet Explorer
	Zones

Probably, I completely missed that, and they do seem to be the 
defaults. I'll test it out tomorrow. Thanks Paul!

On Thu, 10 Jul 2008 22:31:56 -0400 Paul Szabo 
<psz@...hs.usyd.edu.au> wrote:
>Elazar,
>
>> ... Internet Explorer [with] proxy auto-configuration ...
>> The pac file specifies a direct connection for a specific sub-
>net.
>> ... ending up in the Local Intranet zone ...
>
>When going to Tools InternetOptions Security LocalIntranet Sites,
>my IE7 has all of
>  Include all local (intranet) sites not listed in other zones
>  Include all sites that bypass the proxy server
>  Include all network paths (UNCs)
>selected/ticked. Would unticking the second (or all) fix this?
>(I do not know whether those are default settings; that last 
>setting
>seems dangerous or at least counter-intuitive.)
>
>Cheers,
>
>Paul Szabo   psz@...hs.usyd.edu.au   
>http://www.maths.usyd.edu.au/u/psz/
>School of Mathematics and Statistics   University of Sydney    
>Australia

--
Make more on your investments with qualified asset management. Click now!
http://tagline.hushmail.com/fc/Ioyw6h4evKXg03CEgopwTNdnQbYruN1XDRoXeygf5lDZTlYV2lcP4c/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/