[Full-Disclosure] Apparently the practice was prevalent

["Paul Schmehl" <pauls@utdallas.edu>]

According to this story, some programmers have been up late "fixing" the
inability to use @ in their urls. :-)  Once company is even proposing
reversing the change (by sending their users a registry update) so they can
continue to use the feature.  Makes you wonder how long it will be before a
virus or worm reverses the registry key so it can use that "feature".

http://news.com.com/2100-7355_3-5153534.html?tag=nefd_top

Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html