IE Vulnerable to Cross-Browser Spyware Attack

Grok Headline matches for IE Vulnerable to Cross-Browser Spyware Attack

IRM 008: Citrix Metaframe XP is
vulnerable to Cross Site Scripting

IRM 008: Citrix Metaframe XP is
vulnerable to Cross Site Scripting 10/31/2003 12:49 PM
IRM Advisories (Oct 31 2003)

Macs More Vulnerable, Spyware A Danger
(TechWeb)

Macs More Vulnerable, Spyware A Danger
(TechWeb) 03/30/2005 07:18 AM
TechWeb - Enterprises using Apple's Macintosh shouldn't smirk too much over their perceived immunity to the kind of security problems that plague Windows users, a research analyst said.

Mac OS X vulnerable to one-two combo
attack

Mac OS X vulnerable to one-two combo
attack 05/18/2004 09:03 PM
Two flaws, when used together, could let attackers who concoct a special Web site place a file on a Mac and then run the file through a simple browser command.

Oracle Applications vulnerable to web
attack

Oracle Applications vulnerable to web
attack 06/10/2004 08:59 PM
ZDNet Australia Jun 11 2004 1:13AM GMT

Symantec Firewalls And Gateways Are
Vulnerable To Attack

Symantec Firewalls And Gateways Are
Vulnerable To Attack 09/23/2004 11:51 PM

Cross browser SVG

Cross browser SVG 06/05/2005 11:19 PM
Firefox 1.0+ builds now have SVG enabled by default. To test it out I changed an SVG animation I created 2 years ago. It is a 3D animation of a cube morphing into an icosahedron. It works in Firefox 1.0+ and in Internet Explorer with the Adobe SVG Plugin. Sadly Opera 8, which has some SVG support, shows nothing at all.

CA's Intrusion Detection Software
Vulnerable to DoS Attack

CA's Intrusion Detection Software
Vulnerable to DoS Attack 04/06/2005 09:10 PM
A flaw in CA's eTrust intrusion detection software could allow remote attackers to trigger a denial of service attack.

Sony Ericsson Phones Vulnerable to
Bluetooth Attack

Sony Ericsson Phones Vulnerable to
Bluetooth Attack 02/13/2004 10:45 AM
eWeek Feb 13 2004 2:18PM GMT

HTML Tip: Cross-Browser Tables

HTML Tip: Cross-Browser Tables 12/15/2002 11:57 PM
Net Mechanic Dec 15 2002 11:12PM ET

Cross-browser XML paging code

Cross-browser XML paging code 01/05/2004 03:38 AM
CNET Jan 5 2004 3:09AM ET

HTML Tip: Cross-Browser Font Size

HTML Tip: Cross-Browser Font Size 11/30/2002 12:30 AM
Net Mechanic Nov 29 2002 11:13PM ET

HTML Tip: Cross-Browser Table Formatting

HTML Tip: Cross-Browser Table Formatting 11/30/2002 12:30 AM
Net Mechanic Nov 29 2002 11:13PM ET

Cross-Browser Variable Opacity with PNG:
A Real Solution

Cross-Browser Variable Opacity with PNG:
A Real Solution 01/07/2004 07:11 PM
Think you're stuck with wimpy GIFs and their rigid binary transparency? Well, think again, Sunshine. Michael Lovitt shows how to overcome flaky browser support for PNG so you can take advantage of this graphic format's lossless compression, alpha transparency, and variable opacity.

Alternative browser spyware infects IE

Alternative browser spyware infects IE 03/14/2005 05:56 PM

Cross-browser Rich Text Editor (RTE)
added to Roller

Cross-browser Rich Text Editor (RTE)
added to Roller 12/19/2004 03:30 PM

I was doing some Roller testing today and I found that the old Midas-based editor for Mozilla/Firefox is broken. I searched around for docs on Midas and found out about RTE, written by Kevin Roth, an open source cross-platform WYSIWYG editor that works with recent versions of IE, Mozilla, and Firefox (sadly Safari is not supported). Instead of fixing editor-midas.jsp, I replaced it with editor-rte.jsp. So now, thanks to Mr. Roth, Roller 1.0 will include a cross-browser WYSIWYG editor. Here's a screenshot to prove it:

Yahoo Adds Anti-Spyware to Browser
Toolbar

Yahoo Adds Anti-Spyware to Browser
Toolbar 05/28/2004 09:39 AM
Yahoo has announced it will add a feature to its Web browser toolbar that allows users to easily remove spyware programs from their computers. Called Anti-Spy, the feature is currently in beta. Yahoo will be collecting feedback from beta users and intends to utilize that information to produce the final version of Anti-Spy. The current beta version is supported by third-party software from PestPatrol and is available for download to a limited audience at beta.toolbar.yahoo.com.

Yahoo Adds Anti-Spyware Feature to
Browser Toolbar

Yahoo Adds Anti-Spyware Feature to
Browser Toolbar 05/27/2004 10:35 AM

Yahoo Adds Anti-Spyware Feature to
Browser Toolbar (Reuters)

Yahoo Adds Anti-Spyware Feature to
Browser Toolbar (Reuters) 05/27/2004 12:07 AM
Reuters - Internet media company Yahoo Inc. (YHOO.O) unveiled a feature on Wednesday for its Web browser toolbar aimed at making it easier for users to remove unwanted "spyware" programs that snoop on Web surfing habits and other activities.

Spyware vendors under attack

Spyware vendors under attack 02/12/2004 04:23 AM
There has been some reporting that some Spyware companies have been paying for pop-up ad's that if read buy the...

Cisco Security Advisory: Cisco VPN 3000
Concentrator Vulnerable to Crafted SSL
Attack

Cisco Security Advisory: Cisco VPN 3000
Concentrator Vulnerable to Crafted SSL
Attack 03/30/2005 02:01 PM
Cisco Systems Product Security Incident Response Team (Mar 30 2005)

Guardian Unlimited | Special reports |
'10 killed' in attack on Baghdad Red
Cross

Guardian Unlimited | Special reports |
'10 killed' in attack on Baghdad Red
Cross 10/28/2003 11:09 PM

Dvorak foresees a helpless Mac community
in the face of a spyware attack

Dvorak foresees a helpless Mac community
in the face of a spyware attack 12/24/2004 12:31 PM
In a recent online PC Magazine article "Panic Over Spyware" by everyone's favorite curmudgeon, John C. Dvorak, the purposes and implications of spyware are explored. On the final page of the story, Mr. Dvorak writes, "The national media pay little attention to the problem, and many mainstream media tech writers are Mac users, so they don't get it. Who knows what will happen when the Mac community gets hit? They feel immune, and are for now. But when they get hit, there will be few resources to help them, since the antispyware community is busy with all the PC-related problems." I have a hard time disagreeing with the predicted outcome of John C's "what if?" scenario: we probably aren't prepared because we have yet to truly be challenged. But is a spyware attack on the Mac platform even likely? Comment below.

[Links from this story may be found on MacMerc.com. Click the title to delve deeper.]

Sophos discovers first Trojan to attack
Microsoft anti-spyware product

Sophos discovers first Trojan to attack
Microsoft anti-spyware product 06/06/2005 12:06 AM

Yahoo's Offers New Anti-Spyware Tool...
That Actually Finds Spyware

Yahoo's Offers New Anti-Spyware Tool...
That Actually Finds Spyware 08/05/2004 03:50 AM
It appears that Yahoo heard the backlash loud and clear a few months back when they released an anti-spyware tool that just so happened to skip over adware from Yahoo partners. The latest version, built on PestPatrol's technology will now default to notifying users of both "spyware" and what they consider to be "adware" and then give the user the choice of what to do. I haven't tested the product yet, but it sounds like they're moving in the right direction. It still makes you wonder what they were thinking in offering a purposely crippled offering. People know what spyware is, and telling them that spyware isn't spyware doesn't change how people feel about it. It also doesn't make them look kindly back at the company that provided them with the bogus anti-spyware tool in the first place.

Yahoo's Famed Anti-Spyware App Allows
Spyware From Partners

Yahoo's Famed Anti-Spyware App Allows
Spyware From Partners 06/02/2004 10:10 AM
We didn't write about Yahoo's new "anti-spyware" toolbar that they announced last week, because it seemed to receive plenty of hype, and there were no real reviews of how it worked. There are so many so-called anti-spyware applications out there that don't actually stop spyware and adware for fear of upsetting marketing companies or out of worries that actually stopping spyware may make some applications stop working (upsetting the user), that we figured Yahoo's anti-spyware app (hype and all) probably wouldn't be much to bother with. It certainly looks like that may be the case. eWeek is now reporting that Yahoo tries to dance the careful dance of not upsetting certain companies who threate n to sue people who call their application spyware. Of course, the situation is even more complex because Claria (who you probably know as Gator - despite their attempt to change their name to shake that spyware label) is also a partner of Yahoo. So, it's really not surprising that the default setting for Yahoo's anti-spyware app won't actually remove services like Gator or WhenU. Instead, Yahoo's spyware remover claims these programs are "adware" and will only remove them if you click and extra check box each time you run the program. In other words, once again, you can't trust a provider of anti-spyware software, because they're playing both sides of the fence: partnering with providers on the one hand, and then offering weak removal products on the other. If Yahoo were serious about removing spyware from the computers of users they would refuse to partner with companies that used surreptitious tactics to be installed on computers. Instead, they want to look good to users in the front, while letting in spyware/adware from partners through the backdoor.

Spyware Company Sues Utah Over
Anti-Spyware Law

Spyware Company Sues Utah Over
Anti-Spyware Law 04/13/2004 03:42 PM

AOL Offers Spyware Stopper... Just After
They Started Offering Spyware

AOL Offers Spyware Stopper... Just After
They Started Offering Spyware 04/22/2004 02:36 AM
Just a few weeks after saying that they're going to start bundling spyware/adware with their instant messenger product, AOL announces their latest anti-spyware application. While we've been complaining about anti-spyware from ISPs that just points out the spyware, AOL claims that this version will disable (though not delete) the spyware. I wonder if it will catch the spyware that AOL installs themselves.

Browser Wars : Wells Fargo Bans Opera
Browser

Browser Wars : Wells Fargo Bans Opera
Browser 02/05/2005 09:42 PM
As of 8am today - Wells Fargo (one of the largest Banks in the United States) began blocking Opera browser from it's online banking.

The browser is dead! Long live the
browser!

The browser is dead! Long live the
browser! 01/02/2004 07:26 PM

BROWSER SECURITY TEST (free):
Automatically checks your browser for
various security problems. When the test
is finished you get a complete report
explaining the discovered
vulnerabilities, their impact and how to
eliminate them

BROWSER SECURITY TEST (free):
Automatically checks your browser for
various security problems. When the test
is finished you get a complete report
explaining the discovered
vulnerabilities, their impact and how to
eliminate them 03/13/2003 10:26 AM

YAK! 2.1.0 still vulnerable

YAK! 2.1.0 still vulnerable 11/19/2003 05:46 PM
bil (Nov 19 2003)

Mac OS X vulnerable

Mac OS X vulnerable 05/19/2004 01:40 PM

""I am satisfied that I never saw any
intelligence that indicated there was
going to be an attack on America -- at a
time and a place, an attack." "

""I am satisfied that I never saw any
intelligence that indicated there was
going to be an attack on America -- at a
time and a place, an attack." " 04/13/2004 10:28 PM

OS X still vulnerable after Patch

OS X still vulnerable after Patch 05/26/2004 04:15 AM

MAC OS X users continue to be unprotected by latest fix. Their isn't much a uproar as their would be if Microsoft didn't fully fix a security issue.
[Silicon Valley]

Re: Wordpress 1.2.2 is still vulnerable

Re: Wordpress 1.2.2 is still vulnerable 12/22/2004 01:09 AM
Thomas Waldegger (Dec 21 2004)

Still Vulnerable in MSIE

Still Vulnerable in MSIE 05/14/2004 01:30 PM
Greg Kujawa (May 14 2004)

RE: Still Vulnerable in MSIE

RE: Still Vulnerable in MSIE 05/15/2004 12:53 PM
Thor Larholm (May 14 2004)

Mac As Vulnerable As Windows?

Mac As Vulnerable As Windows? 12/11/2003 03:40 PM

Comersus 5.098 XSS Vulnerable

Comersus 5.098 XSS Vulnerable 08/02/2004 03:25 PM
Abdul Azis (Aug 02 2004)
Grok Description matches for IE Vulnerable to Cross-Browser Spyware Attack
GrokA matches for IE Vulnerable to Cross-Browser Spyware Attack

IE Vulnerable to Cross-Browser Spyware Attack

The following phrases have been identified by the grok system as matching this entry: