Re: [Full-disclosure] Apple IOS security issue pre-advisory record

[Charlie Derr <cderr@xxxxxxxxxxxxxxx>]

On 03/23/2012 07:26 PM, Michal Zalewski wrote:
>> I find it very unfortunate that 300 supposed security professionals clicked
>> on a hidden link like that without first checking what it was, or if not
>> simply ignoring it like I did!!!
>
> So how do you meaningfully "check what it is" without actually
> requesting the document?
>
> And what's the difference between that post and a hidden<img>  or
> <iframe>  included on a less obvious website?
>
> /mz


YMMV, but I always figured attempting to grab things with links or lynx from a 
command-line GNU/linux environment ought 
to be fairly safe, even for files that I'm pretty certain contain viral/trojan 
code (and to state the obvious, I don't 
execute anything that I download, I simply use tools to view).   And for the 
record, I didn't get a chance to do that in 
this case, as I missed the original post.

     best,
         ~c



>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/