June 10, 1997
Web Browsers that announce your PASSWORDS!
Is your system at Risk?
Hello 
This article, I'll tell you up front, is probably going to be a bit controversial. Some will feel this is not possible, for us to go to websites and the webmaster has his or her site configured to grab passwords.
We all know that when we visit sites these webmasters can get our system set up, the last site we visited, our email address. But as Aaron Spangler tries to tell us, they can get our passwords also, and he wants to prove it to you.
Aaron Spangler, the individual responsible for finding the bugs states: "So far I have been able to confirm this bug on the following test benches".
The systems that are most vulnerable are:
Windows NT 4.0 Workstation
(no Service Pack)
Windows NT 4.0 Workstation
(Service Pack 1)
Windows NT 4.0 Workstation
(Service Pack 2)
Windows NT 4.0 Workstation
(Service Pack 3)
Windows NT 4.0 Server
(no Service Pack)
Windows NT 4.0 Server
(Service Pack 1)
Windows NT 4.0 Server
(Service Pack 2)
Windows NT 4.0 Server
(Service Pack 3)
Windows NT 3.51 Workstation
(up to Service Pack 5)
Windows 97 Beta
(all memphis builds)
Windows 95 when configured just right in certain novel environments With any of:
Netscape Navigator 2.x or 3.x
(all versions)
Netscape Communicator 4.X
(all versions)
Internet Explorer 2.0 3.0 3.01 3.02 4.X (all versions)
NCSA Mosaic Version 3.0
I've been to Aaron's site at: www.ee.washington.edu/computing/iebug
His test tells you if your browser is giving out your password by showing a picture if so, if not, a picture will not show.
When I went to the page, the pic did not show, however, I am using Win 3.11 and Netscape 2.01. If I had Win 95 then my system probably would be vulnerable.
I feel this information should be more generally known. But I don't see it. Aaron seems to be the voice in the wildnerness as far as the average/new user is concerned.
I would encourage everyone to take a trip to this site and then email a message to Aaron [from the site] letting him know your experience. Let me know also. I also am shocked to find this information out there, however, if this information is true, then consumers need to take action on this one. If not, we get to stop a hoax...
I hope I didn't shake anyone to badly and it all comes out for the best.
Take care....-Art-
|
Experts Exchange
A Troubleshooting Page, their moto: "Got a Question?" They leave no rock unturned from computer equiptment to taxes, and programming to travel!
Solve your hardware, software, and just about any problem related to computing today.
What is Dejanews
Dejanews is a chronological database of newsgroup messages. DJN is also an invaluable tool for accessing Usenet messages about any topic ever written in the newsgroups! [or author of said messages]
By using the first search box you can get general information from any newsgroups on your requested topic.
The second search box will give you a list of the groups that have mentioned your subject search. This directory is "clickable" so that you can search each group individually.
Click on the authors name, and get a list of groups they have ever written in, great for finding people of the same interests!
The United States Postal Service
One of the first things a new user runs into on the Net/WWW is the infamous chainletters, that is, offers to make $50,000 in 90 days, or buy reports and resell them via a chain of "distributors".
Learn the truth before falling for these traps.
Scams and the Federal Trade Commission
The best site to keep up on Internet Scams. Also has links to the Better Business Bureau and the National Fraud Information Center!
New ISDN Information
C/Net ISDN Ratings:
1. ISDN: NOW YOU CAN!
Check out the comparison of 22 ISDN modems for the PC and the Mac. Also, be sure to take advantage of the exclusive ISDN services guide, "get ISDN now." It all starts here:
|
Internet Help and Tips
