Firefox flaw raises phishing fears

ZDNET ^ | 1/7/2005 | Ingrid Marson

[KwasiOwusu]

A vulnerability in Firefox could expose users of the open-source browser to the risk of phishing scams, security experts have warned.

The flaw in Mozilla Firefox 1.0, details of which were published by security company Secunia on Tuesday, allows malicious hackers to spoof the URL in the download dialog box that pops up when a Firefox user tries to download an item from a Web site. This flaw is caused by the dialog box incorrectly displaying long sub-domains and paths, which can be exploited to conceal the actual source of the download.

Mikko Hypponen, director of antivirus research at software maker F-Secure, said this bug could make Firefox users vulnerable to cybercriminals. "The most likely way we could see this exploited would be in phishing scams," he said.

To fall victim to such a scam, a Firefox user would have to click on a link in an e-mail that pointed to a spoofed Web site and then download malicious software from the site, which would appear to be downloaded from a legitimate site.

[KwasiOwusu]

"Then you might as well quit posting on these threads, as you do not know what you're talking about"

Very funny.
Not using an open source , communist piece of garbage does not make anyone closed minded.
It makes me part of the 90% of the population still uses only Microsoft Internet Explorer.
Being part of the ABM (Anything But Microsoft) funnies, and defining yourself by how much anti-Microsoft hate you can generate per day like you is what makes you a screwed up conspiracy theory nut case.

"The closed-mindedness isn't good either, and much worse than the zealotry you claim of the free software advocates"

You want closed mindedness, try the Gates-hating, Microsft-hating open source crazies.
They are the Ayatollahs of closed mindedness.

[KwasiOwusu]

"2) IIS 6 is actually pretty decent"

Microsoft IIS 6 simply ROCKS big time!

[Richard Kimball]

Gettin a little desperate there, aren't you Woody?

[KwasiOwusu]

"But not as successful as CitiGroup"

Citigroup is certainly OLDER than Dell (Citigroup is over a 100 years old I believe, while Michale Dell himself is only about 40 years old)), but Dell has grown much faster than Citigroup over the past 15 years at least.
Plus Dell has gorwn organically, while most of Citigroup's growth has come from buying other really huge companies.

I'll take Dell's growth over that of Citigroup any day.

"lol, you are completely clueless.:

I have constantly proved that its you that is clueless on this board as I will yet again :)

" Selling a service is the same thing as selling a product. Citibank and WellsFargo sell a service and they do a higher transactional volume (in transactions) per day than Dell"

As usual, you are clothing at straws.
This is the difference between Dell and Ctigroup, Wells Fargo etc etc,you see Dell is a DIRECT sales company.
They don't do PHYSICAL stores or branches.
ALL Dell's sales are done on the phone or the overwhelmingly done on the Internet via theor web site.
Citigroup does the overwhelming amount of their banking business through their branches.
In fact they have just built a whole set of new branches all over New York City.
Since we are talking about WEB business here, Del is still ahead of Citigroup. Get it?

" BTW nice way to ignore the fact that the average server hosting dells websites have less than 25% the uptime than a server hosting Citibanks.. "

Irrelevant.
Bottom line, Dell is by far the # 1 retailer on the Internet, running solidly on Windows. Its Windows through Windows that they have attained the heights they have.

[KwasiOwusu]

"But not as successful as CitiGroup"

Size does not equal success.

GM is much bigger than Toyota, but Toyota has been much more successful that GM in the auto business.

Over the past 20 years, I'd say Dell has been more successful than Citigroup.
Plus most of Citigroup's growth has been through buying other huge companies.
Dell's growth has been almost totally organic.
There is a big difference.

[KwasiOwusu]

"Show me."

Already have.
Read post 84.

" highly doubt Dell beats Amazon"

Dell does. By far.
Its not even close.

[KwasiOwusu]

quot;Gettin a little desperate there, aren't you Woody?"

Sorry to disappoint ya DUmmy.
Couldn't be happier. :)

[KwasiOwusu]

"At least do some research first, Amazon runs Linux/Apache"

Never said Amazon run on Windows.
Read that post again, will you?
I said bn.com runs on Windows.
Is this the best you can do? Bring in quotes that don't exist?

"NASDAQ is now IIS6, but look at that poor uptime. ....
London: You want to talk about horrible downtime! "

You guys keep bringing that rubbish from the European Netcraft funnies up.
Like I said before, its irrelevant.
I use the Nasdaq site all the time.
I don't really remember the last time Nasdaq was actually down.
In fact Nasdaq has been growing from strength to strength on the back of Windows servers. That is what matters.
Same with the London Stock Exchange (I used to live in London and have traded British stocks for over 10 years)

"But the big daddy of exchanges, the NYSE, "

Operative word here is big daddy which should read granddaddy.
Practically all the hot, dynamic, cutting edge tech companies are on the Nasdaq.
In fact the Dow Industrial Index was forced to add in Nasdaq stocks like Microsoft and Intel into the Dow 30 just to remain relevant.
Even Google is on Nasdaq.
Guess which stock exchange represents the future.

[KwasiOwusu]

"Is it just me or did this turn into "

On no! Not another ABM nut.
Hey, how are your pals in the madhouse doing?

[KwasiOwusu]

"I'll give you very good odds that even if your large corporate web server is running IIS, what's running the back end is *NIX if it's a large, critical application -- especially if it's a bank or brokerage."

I won't even bother to ask you for a link on that one.

Suffice it is to say that increasingly big banks like the British Abbey National and big arilnes like Jetblue, are running most or an increasing # of their back end operations on Microsoft Windows 2003 Datacentre edition, on the SUPERB Unisys ES700's.

[antiRepublicrat]

I won't even bother to ask you for a link on that one.

Only recently has Windows even been remotely considered capable of running critical systems, and then multiple redundant systems are necessary. Even then, the big guys often need mainframes, and Windows just can't play in that world.

[antiRepublicrat]

of their back end operations on Microsoft Windows 2003 Datacentre edition, on the SUPERB Unisys ES700's.

BTW, Microsoft has been scaling back its support for Itanium, cancelling two versions of Windows for it recently.

[antiRepublicrat]

Never said Amazon run on Windows. Read that post again, will you?

I did. Understand now.

You guys keep bringing that rubbish from the European Netcraft funnies up. Like I said before, its irrelevant.

How is it irrelevant. Even when you have multiple load-balanced, redundant servers, more down time still means more admin time, which means higher TCO.

Even Google is on Nasdaq.

And Google, possibly the most-visited site in the world, runs one of the biggest Linux installations in the world. The brains behind this credit their success partially to being able to tinker under the hood of Linux to be able to do exactly what they need to. Obviously, Windows therefore wouldn't have worked.

[antiRepublicrat]

Already have. Read post 84

84 refutes your point.

Dell does. By far. Its not even close.

Really? Dell actually ran more transactions than Amazon last year? Do you really think Dell was selling 32 computers per second this holiday season? I though Dell was the third most visited site this holiday season.

[antiRepublicrat]

Microsoft IIS 6 simply ROCKS big time!

I wouldn't go that far. IIS finally got multiple web sites and multiple independent application pools, stuff that's been around in other servers for years. It also finally plays just a little better with clustering (but not quite there yet). That's good, and has made my job a lot easier. But I wouldn't quite say "rocks" just yet. Maybe IIS 7 with Longhorn.

[antiRepublicrat]

Not using an open source , communist piece of garbage does not make anyone closed minded.

Open source is communist? Please remember to point that out to the owner of Free Republic. And, yes, cloed minded. You're trashing something you've never even used. I'm trashing a product (IE) that I've used since its release.

and defining yourself by how much anti-Microsoft hate you can generate per day like you is what makes you a screwed up conspiracy theory nut case.

Unlike you, I use those products I'm talking about every single day. My daily work is .NET, Visual Studio, Windows Server 2003 (with IIS 6), SQL Server 2000, IE, and other Microsoft software. When I say I hate designing for IE for a specific reason, it's because I have designed for it and encountered its problems, not because I thought something was "commie" and refused to use it.

[antiRepublicrat]

The man thinks windows runs the internet when structurally without UNIX the internet would stop tomorrow (sure eventually they would get it back) where as if all windows boxes dropped of the internet only individule companies would be affected

There's another one above Windows: Imagine if all the IOS boxes disappeared.

[KwasiOwusu]

"84 refutes your point"

84 buttresses my point.

"Really? Dell actually ran more transactions than Amazon last year?"

Read what I said again will you.
The word "transactions" never made any appearance in what I said.
You just brought it up.
What I said, is, and I repeat, Dell does far more business online than Amazon.
Its not even close.
Dell has annual sales of over $40 Billion, Amazon has annual sales of $5.2 Billion.
They are not even in the same league!
And Dell is a direct sales company.

[KwasiOwusu]

"Open source is communist?"

Open source ideology as defined by Richard Stallman and Eric Raymond, have parts of it sounding remarkably like "Das Capital" from Karl Marx.

These guys are every bit as anti-capitalist and anti-profits as Lenin was.
Their # 1 beef with Microsoft has always been that Microsoft makes big profits from selling software.
Well Duh!, this is America. This country was built on free enterprise and the profit motive.


"Please remember to point that out to the owner of Free Republic. "

Anyone can use a piece of software.
Doesn't change the fact that the ideology behind the open source movement will make Charmian Mao proud.

[KwasiOwusu]

"But I wouldn't quite say "rocks" just yet. "

I will.
And I'll even further.
In every comparison that I have seen, IIS 6 on Windows 2003 Server has simply smoked Apache on any Intel platform in the speed department.
IIS 6 simply sizzles.