[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-Disclosure] another product affected by recent MS IE '@' patch



In Germany, and maybe in other parts of the world, some providers
are attracting customers by announcing webpage packages where email
address == web address. so, john@doe.de is the email, and
john@doe.de is the website, while jane@doe.de may be the website of
john's wife.

I hope this has not been reported yet, but in the light of the
recently announced MS IE patch to guard against the URL obfuscation
attacks (which is a typical MS fix and absolutely ridiculous), these
providers may now renew their product portfolio. Not like M$
cares...

-- 
martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
 
invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver!
 
last year, out in california, at a pc users group, there was a demo of
smart speech recognition software. before the demonstrator could begin
his demo, a voice called out from the audience: "format c, return.
yes, return." a short demo it was.

Attachment: signature.asc
Description: Digital signature