Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Update on the IE vulnerability » Another reason to use Firebird...
Search Topic:
Uniqs:
403
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Post a:
Post a:
Simple safety net »
« Small, but important, correction  
AuthorAll Replies


borborpa
Slipping Slowly Into Oblivion
Premium
join:2002-02-20
New Cumberland, PA
clubs:
Another reason to use Firebird...



Amaethon

join:2000-10-22
USA
clubs:
No fix yet eaither.. shessh

youngmoore

join:2001-03-16
Marietta, GA
·Sprint Mobile Broa..

this is what I get from firebird
»www.symantec.com%2Fanything%2FI%···dex.html

from IE
»www.symantec.com/anything/I/want···ut/here/

Interesting

From my understanding you can clock the URL line to just about anything you want. I use that for our webmail so it just shows the hostname not the IP.

ym


Xtract

join:2003-04-25
Etheria
reply to Amaethon
I loaded firebird when I read the first article and have not touched IE since.


woody7
Premium
join:2000-10-13
Torrance, CA
·EarthLink
·DSL EXTREME

said by Xtract See Profile:
I loaded firebird when I read the first article and have not touched IE since.

Been using it for a long time now and only use IE for updates........have been a happy camper since
--
Bloome


deltat2000
Timor Omnis Abesto
Premium
join:2000-04-13
127.0.0.1
clubs:

reply to borborpa
Okay...........now that you have me totally paranoid..whats the real url/link to Opera or Firebird?

Hopefully Justin will post it.......I think I'de trust his links...

deltat2000 softly whistles in the dark! and thinks "boy its getting kinda scary online"
--
"Lets Roll" You are missed Todd.The Future Is Purchased By The Present!Lifetime member VRWC


Xtract

join:2003-04-25
Etheria
Use good old google


mrchris
We don't miss you Bush
Premium
join:2002-10-01
North Babylon, NY
reply to borborpa
Using Firebird since 0.6 and Thunderbird since 0.2


insomniac84

join:2002-01-03
Schererville, IN

said by mrchris See Profile:
Using Firebird since 0.6 and Thunderbird since 0.2

Do you want a cookie?


jplove71
IBEW 113
Premium
join:2001-03-16
Colorado Springs, CO

reply to deltat2000
Mozilla Firebird product page. I've been using Firebird for about 9 months now, Mozilla for 1 1/2 yrs before that, and Netscape 4.x before that.
--
Browsing with Mozilla Firebird 0.7


inciter
Noobie
Premium
join:2000-08-30
Rohnert Park, CA

reply to borborpa
Glad I don't use FireBird! or anything eles but IE! At least they come up with the fixes and warnings. Are you under the same bug? Maybe maybe not.... But at least I know whats wrong with my browser and how to fix it.
--
A SUCKER is born every min. On the Internet a SUCKER is born every Sec.


Xtract

join:2003-04-25
Etheria
And what is your suggestion for fixing this one?


Winerin
Premium
join:2002-03-30
Woodland Hills, CA

2 edits
reply to inciter
Good for you, but since IE is given with the operating system a very high percentage of people will only use IE. In addition, many are not expert programers and are not aware of issues such as these and will be very hurt by these.

jram

join:2003-08-06
Albany, NY

 reply to borborpa
I hope this isn't true

A vulnerability which affects Internet Explorer can be exploited by scammers who try to trick people into revealing details of online banking accounts or other private information.

The flaw, wherein Internet Explorer displays the contents of one web site while showing a different, incorrect, address in the browser address bar, is not confined to IE but also affects version 0.7 of the Mozilla Firebird browser, according to a security analyst from Secure Data Group.

Ben Robson said members of the security communirty had found that all users of Internet Explorer 6, Outlook Express 6 and Mozilla Firebird 0.7 - the last-named on both Linux and Windows - were affected by this vulnerability.

However, others have contested the claim that the flaw can be exploited under Mozilla Firebird.

The flaw was disclosed on Wednesday by graphic designer Sam Greenhalgh who has set up a demonstration here.

Robson said the big giveaway in scams like those on eBay, where users were asked to enter details at a bogus website, was that the URL would not match the "eBay.com" address.
advertisement

advertisement

"This new vulnerability allows the attacker to send the victim to a page that looks and behaves just like the eBay site and has the "eBay.com" address in the address bar. But in fact any information the user provides is being sent to another website looking to steal their details," he said.

Robson said a malicious user could use this vulnerability and create a series of fake websites that looked like they were those of a legitimate company.

"They can ask the user for credit card details. However upon going to the page, inspite of what the URL states, the user is in fact at the malicious user's website. As a result the user may unwittingly enter important personal information," he said.

Using a technique such as this with the recent 'eBayUpdates' scam would have made the scam almost impossible to detect until it was too late for thousands of victims, Robson said.

He said it worked with SSL-encrypted links as well. "As such it would be very easy for someone to misrepresent themselves as a bank, or other financial institute and convince the user to input their access details. Even the little 'lock' symbol at the bottom of the browser would look right.

"We have proved that it is possible to direct a web browser to an alternate web server, whilst placing a bank's URL in the address bar, and having the link place the banks URL in the status bar at the bottom of the screen. As such we can see no way that a user might determine that a link is illegitimate," he said.

Neither Microsoft nor the Mozilla project have yet publicly reacted to the news of the vulnerability.


jplove71
IBEW 113
Premium
join:2001-03-16
Colorado Springs, CO

said by jram See Profile:
The flaw, wherein Internet Explorer displays the contents of one web site while showing a different, incorrect, address in the browser address bar, is not confined to IE but also affects version 0.7 of the Mozilla Firebird browser, according to a security analyst from Secure Data Group.
The difference between MSIE and Mozilla Firebird is that the fake URL is visible in the address bar in Firebird whereas it isn't when using MSIE.
--
Browsing with Mozilla Firebird 0.7


Hayward
K A R - 1 2 0 C
Premium
join:2000-07-13
Key West, FL

reply to inciter
said by inciter See Profile:
Glad I don't use FireBird! or anything eles but IE! At least they come up with the fixes and warnings. Are you under the same bug? Maybe maybe not.... But at least I know whats wrong with my browser and how to fix it.

Its a shame how easily some can be deluded by MicroGod(soft).... M$ has a long and unwavering history of releasing things long before they are ready and solid, just because they SEEM to work... however they never even seem to attempt to break them. Its is a closed group of self interested developers.
The only reason you know about any of the problems is because someone OUTSIDE M$ found them and embarrassed them into fixing them... Microsoft does not find them themselves. And since the source code is not readily available no one else can look for the problems BEFORE they happen. They just create new "glitter features" that more often than not cause problems, because they haven't worked them hard enough once they have the appearance of working.

Mozilla on the other hand is a consortium of INDEPENDENT developers... and even if a bad apple got in and tried to do something bad... the other would likely spot it before it was even released. Plus there are people going over the code everyday, mostly with the goal of improving it, but also often correcting problems.

But go right a head delude yourself into believing M$ will protect you... you'll get had sooner or later.
--
»haywardm.com (Hayward's Key West)


jose3030
Premium
join:1999-08-17
Manassas, VA
reply to insomniac84
Just dont track my online movements and we'll be fine!

jram

join:2003-08-06
Albany, NY

reply to jplove71
Thank-you,I just started using Firebird a couple months ago and have it the way I want..I have a couple of comments,I 'm on the machine at least 7hrs.a day,never been to a site that I have had a problem on ,including on-line banking..They have a extension open with IE just in case..I haven't had any kind of a pop-up since I've been using Firebird,not even the sliding ones.
Last thing,yes IE can be set-up to be secure but it will drive you nuts with them asking all of the time blah blah blah,I have to many things to do to waste my time..


KrK
Heavy Artillery For The Little Guy
Premium
join:2000-01-17
Tulsa, OK
reply to borborpa
Yep, clicked the link and saw.....

(http deleted) " www.symantec.com%01@i.dslr.net/symantec/www.symantec.com/index.html "



Hazeleyze

join:2003-05-09
Wauseon, OH
reply to borborpa
After I saw this, I switched to Firebird 0.7. This is my first experience with another browser and I don't miss IE one little bit.
Forums » Update on the IE vulnerabilitySimple safety net »
« Small, but important, correction  


Tuesday, 10-Nov 06:21:34 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [83] VoIP Over 3G Still Not Working For iPhone
· [82] Verizon Keeps Swinging At AT&T
· [33] Bill Would Force ISPs To Block Financial Scams
· [24] Mediacom Hints At 50, 100 Mbps Speeds
· [14] Clearwire To Get Another $1.5 Billion
· [11] Monday Morning Links
· [9] 15 States Have Now Gotten Broadband Mapping Money
· [6] AT&T Launching New 7.2 Mbps 3G Modem
Most people now reading
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Windows 7 boot manager editing questions [Microsoft Help]
· WoW Updater cannot find wow.exe? [World of Warcraft]
· How in the world am I going to get into college? [General Questions]
· Blown out Ballasts [Home Repair & Improvement]
· My cat is reluctant to exercise. [General Questions]
· Connecting to Google Voice Via SIP [VOIP Tech Chat]
· 60 Minutes piece on cyber security last night [Security]
· Know when to run! [Home Repair & Improvement]
· MI424WR-GEN2 Rev E Configuration Thread [Verizon Fiber Optics]