PDA

View Full Version : Super Snooper


Bikewer
1st July 2004, 05:58 PM
On "Talk of the Nation" today, the program was titled Internet Vigilantes. Talked a lot about security issues, including a new "bug" that is capable of pulling passwords and logons before encription, as on online banking sites, and later sending the info to a website.
Thing exploits a defect in the Javascript features of IE. (naturally)

Easy fix...Turn off Javascript. Security labs are working on it...according to the article.

bignickel
1st July 2004, 06:19 PM
yeah, I posted this in the 'bogus' thread:

http://story.news.yahoo.com/news?tm...us&sid=96001018

"NEW YORK (AFP) - Hackers have found a way to intercept passwords for banking websites by infecting pop-up ads with a program that can install itself on computers and record user keystrokes, security experts said. "


I just downloaded Firefox last night. Install this weekend.

Bikewer
1st July 2004, 07:41 PM
I'm thinkin' the same thing.

Bikewer
2nd July 2004, 07:37 AM
I downloaded the BHODemon program last night:

http://www.definitivesolutions.com/bhodemon.htm

A simple little program that tells you what browser helper objects are running on your system, and lets you disable any that are suspicious.

Bottle or the Gun
2nd July 2004, 07:52 AM
Mozilla is safe until it is used by more users, then the hackers will focus on that.

hgc
2nd July 2004, 10:38 AM
The U.S. gov't is about to stop all use of IE. Will break in the news today. You heard it hear first!

Um, just the clarify.. I mean stop all use in gov't offices.

roger
2nd July 2004, 10:49 AM
Originally posted by hgc
The U.S. gov't is about to stop all use of IE. Will break in the news today. You heard it hear first!

Um, just the clarify.. I mean stop all use in gov't offices. I doubt it. NMCI (the navy-marine corps intranet) relies on IE, and it's not exactly easy to roll new applications into it (like, say, 6 months).

Nasarius
2nd July 2004, 01:34 PM
Originally posted by hgc
The U.S. gov't is about to stop all use of IE. Will break in the news today. You heard it hear first!

Um, just the clarify.. I mean stop all use in gov't offices.

I wouldn't be surprised, given that the Department of Homeland Security is recommending against IE (http://story.news.yahoo.com/news?tmpl=story&cid=74&e=3&u=/cmp/20040702/tc_cmp/22103407).

davidhorman
2nd July 2004, 03:31 PM
NMCI (the navy-marine corps intranet) relies on IE

In what sense does it rely on it? Does the intranet refuse to serve requests to any other browsers? Or does it rely on the use of IE specific plugins?

David

evildave
2nd July 2004, 09:22 PM
Probably the plug-ins. They're insidious. The developer makes the web page pretty and colorful, and collects his check, and it turns out the thing won't display on anything but IE. It wasn't in the requirements.

Getting those swoopy, cool effects and push buttons to work across browsers isn't as simple as it would seem on the surface. Naturally the Microsoft tools that make the fruity, friendly interfaces will have a ton of crooked, non-standard IE hooks in them that few other browsers will interpret properly because they're proprietary, closely-guarded undocumented goo.