Internet Explorer 7 vulnerable to a 'spoofing bug'.

[zekrahminator]

Whenever Internet Explorer 7 encounters a suspected forged website, or something that might contain a phishing scam, it alerts the user through the information bar. In Internet Explorer 6, the information bar overlapped whatever browsing window the user has open. In Internet Explorer 7, there is a potential flaw that would let an attacker hide the information bar, leaving users clueless when they come upon a possibly forged website. Microsoft says that it knows of no website that performs such a trick, and when Internet Explorer 7 encounters a known forgery, it doesn't load the page at all.


View at TechPowerUp Main Site

 

[Jimmy 2004]

I don't like the idea of sending info on every site I visit to M$ myself.

 

[Alec§taar]

This might sound a bit "strange" as an outlook to have on this, but I think this being discovered is a GOOD thing - one less thing to worry about when the next "patch tuesday" comes (because hopefully by then, MS issues a patch for this).

I think that in a weird way the "hacker/cracker" types that do this type of "IE Hacking/Cracking" for vulnerabilities is MS' best buddy, doing the "R&D" testing needed.

APK

 

[Jimmy 2004]

If they make it public that there is a fault and M$ fix it quickly there isn't too much of a problem.

 

[bruins004]

Yea the only thing that makes me weary is that these hacks/exposures get seen by the public.
So some people will try to exploit these since they now know about it.
I agree and hope the MS fixes it soon, but wouldnt be suprised if they dont.

They have been pushing back everything lately (which is the MS way).

 

[Alec§taar]

Yea the only thing that makes me weary is that these hacks/exposures get seen by the public.
So some people will try to exploit these since they now know about it.
I agree and hope the MS fixes it soon, but wouldnt be suprised if they dont.

They have been pushing back everything lately (which is the MS way).

Yea, but usually? YOU as the end-user, CAN fully seal yourself against a good 90-95% I would say of WHAT you can be 'invaded' by, even in IE, it's SIMPLE: Disable ActiveX & Active Scripting, Java, & JavaScript... it tends to work, though @ a sacrifice of some abilities on some websites!

APK

P.S.=> Sure, I don't LIKE "losing some functionalities" but, I'd rather THAT, than get something like the W32Pinfi virus, which was nigh impossible for me & one of my relatives to pull of his system (it WAS truly one of those "nuke it from orbit" & repave deals, backup of data, virusscans of it, & then reformat main disk)... apk