stargeek
Nasty new IE vulnerabilityNasty new IE vulnerabilityNasty new IE vulnerability 12/09/2003 02:34 PM Most people reading are probably aware of the common trick whereby spammers and other assorted ne'er-do-wells publish URLs with usernames that look like hostnames to fool people in to trusting a malicious site - for example, http://www.microsoft.com&session%123123123@simon.incutio.com . This trick is frequently used by spammers to steal people's PayPal accounts, by tricking them in to "resetting" their password at a site owned by the spammer but disguised as PayPal.com. Today's new Internet Explorer vulnerability makes the problem a hundred times worse. By including an 0x01 character after the @ symbol in the fake URL, IE can be tricked in to not displaying the rest of the URL at all. Don't expect a patch for a while either; the guy who discovered the bug released it to BugTraq on the same day he notified the vendor. This is a GrokNews Entry: (what is grok?)Nasty new IE vulnerabilityGrok Headline matches for Nasty new IE vulnerabilityNasty LKMNasty LKM 08/08/2004 07:03 AM Check it out ! A Nasty Fix For AppleA Nasty Fix For Apple 12/11/2003 12:30 AM It didn't have to be this way. Properly trained support reps would have headed this problem off long before it blossomed into a subversive online antiadvertising campaign. And a better customer-support system in general could be a huge selling point for Apple, as users encounter increasing complexity in pulling together the various pieces of the digital lifestyle. By Alex Salkever (BusinessWeek via MyAppleMenu) Nasty telemarketersNasty telemarketers 06/05/2005 11:31 PM Every so often we get a call from 888 858 9823. Sometime in the mid-nineties the phone number was the fax number of some small company here in Los Angeles, so when it just said "click [silence]" I thought it was a confused fax machine. Over the last weeks it's become more frequent. Every few days or so, maybe more. Grrh. Today I tried waiting a little to see if it was a telemarketer, but nothing happened. I tried looking... Nasty new IE holeNasty new IE hole 12/09/2003 06:09 PM A new MS Internet Explorer vulnerability is discovered. Most digerati already know about the spammer and lamer trick to publish URLs that look like legitimate hostnames to fool people in to trusting a malicious site. This trick is frequently used by spammers to steal people's PayPal accounts, by tricking them in to "resetting" their password at a site owned by the spammer but disguised as PayPal.com. Today's new IE vulnerability is significantly worse. By including an 0x01 character after the @ symbol in the fake URL, IE can be tricked in to not displaying the rest of the URL at all. Don't expect a patch right way, the guy who found the hole released it to BugTraq on the same day he notified Microsoft. (via Simon Willison) Nasty AT&T SurpriseNasty AT&T Surprise 07/02/2004 09:53 AM AT&T Wireless hit me with an unpleasant surprise this month — a $268.68 cell phone bill, compliments of roaming and... A Nasty Fix for AppleA Nasty Fix for Apple 12/11/2003 02:27 PM Business Week Dec 11 2003 1:37PM ET PDA Viruses Could Get NastyPDA Viruses Could Get Nasty 07/29/2004 11:58 PM Viruses that target handhelds can be even more dangerous than their cousins that attack PCs, spawning self-replicating programs that hide easily, a security researcher told an audience of security professionals at the Black Hat Briefings conference here this week. The first virus aimed at Pocket PC handhelds, revealed last week, could be far worse if it were modified slightly to carry a harmful payload, said Seth Fogie, a vice president of Airscanner, which develops security software for the Window Mobile platform. The benign WinCE4.Duts.A (or just "Dust") virus was created as a demonstration of threats against personal digital assistants. However, Fogie noted, such programs could spread stealthily, logging keystrokes on the Pocket PC's "soft keyboard," and sending data stored on handhelds across the Internet.  View: Complete
Article News source: PCWorldRead full story... It's Jackson if You're NastyIt's Jackson if You're Nasty 02/10/2004 02:45 AM I watched the game, but wasn't impressed by the commercials and tuned out the half-time show about half-way through... then I read about this:  Stupid CBS... Bad idea... Bad execution... HAPPY PEOPLE ARE NASTY?HAPPY PEOPLE ARE NASTY? 06/21/2004 07:48 AM more» .. more nytimes.com/2004/06/20/magazine/20WWLN.html RIAA's Nasty Easter EggRIAA's Nasty Easter Egg 04/11/2004 05:03 PM Nasty 0.5 (Default branch)Nasty 0.5 (Default branch) 04/05/2005 11:56 AM Nasty is an advanced tool for recovering GPG private-key passphrases. It has multiple methods for brute-force attacking the passphrase (searching the whole space, random searches, and dictionary attacks using an external wordlist). It saves its state to a file so that it can continue from where it stopped the last time it ran. EMC, IBM storage battle gets NAStyEMC, IBM storage battle gets NASty 04/18/2005 07:33 AM EMC this week announced a new NAS system to its lineup, playing a tit-for-tat game with IBM in the storage market. IBM's battle with EMC gets NAStyIBM's battle with EMC gets NASty 04/06/2005 09:15 AM IBM and Network Appliance on Wednesday announced a strategic storage relationship aimed at expanding both companies' product lines and offering a more united front against storage giant EMC. Nasty 0.6 (Default branch)Nasty 0.6 (Default branch) 04/13/2005 02:11 PM Nasty is an advanced tool for recovering GPG private-key passphrases. It has multiple methods for brute-force attacking the passphrase (searching the whole space, random searches, and dictionary attacks using an external wordlist). It saves its state to a file so that it can continue from where it stopped the last time it ran. Changes: Now compiles and runs with version 1.0.2 of the gpgme library. A bug that could cause random crashes has been fixed. Scratching Nasty BloggerScratching Nasty Blogger 01/16/2004 01:02 PM After reading Mark Pilgrim's latest post in which he dragged XHTML into the bad feed handling discussion and tried to instigate a fight by making it look like Tim Bray insulted others, I felt pretty upset and my opinion of Mark dropped down a few notches. Then this morning, I found out via Dave that Mark is blocking traffic coming from Dave's blog. That drops my opinion of Mark down to the gutter so I removed him from my blogroll. Put me on your blacklist too, Mark, because I finally had enough of your nasty antics. No matter how much fancy Python script you write, you'll never be able to refill those holes if you keep digging like that. Online personals business gets nastyOnline personals business gets nasty 06/16/2004 07:33 PM Techzonez Jun 16 2004 11:21PM GMT IBM's battle with EMC gets NASty
|
Also check out: |