[ShadowAce]

IE pop-up spoof won't get patch

[N3WBI3]

Although the pop-ups could be used by attackers, overlaying multiple windows in a Web browser is a feature, not a vulnerability, according to an advisory posted Tuesday on Microsoft's TechNet Web site.

Cant say I much disagree with him on this, the browser is doing exactly what it was desigened to do. That being said there should be a patch which give the user some indication of there that windows is from!

Opera has said that its latest browser, 8.01, would display the pop-up's origin, letting a user inspect its URL to see if it came from a trusted site.

Im a FF user myself but kudos to the good folks at operasoft..