Microsoft Says “IE URL Spoofability Not a Problem”   - 1,664 Views, 2 Comments

Summary: Dear Readers, As reported here by Aunty just days ago, there is a vulnerability in Microsoft Internet Explorer which allows bad people to make you think that you are clicking on a link for one site, and then redirecting you to another site altogether. ...

Previous Article « Beware This Spam Scam!
Read Next Article » Apple’s OS X and Open Source BSD Named Most Secure Operating Systems

  Follow Anne on Twitter     Friend Anne on Facebook

Dear Readers,

As reported here by Aunty just days ago, there is a vulnerability in Microsoft Internet Explorer which allows bad people to make you think that you are clicking on a link for one site, and then redirecting you to another site altogether. As an example, Aunty even spoofed a link to Amazon in the post. It sure looked like clicking the link would take you to Amazon, but in fact it took you right back to the post you were reading.

Imagine if you got email which appeared to be from your bank, and when you clicked on the URL which “your bank” had sent you, it took you to a site which was so similar to your bank’s site that you never noticed the difference. Imagine what someone could get unsuspecting users to do with a trick like that.

Well, apparently, whatever it is, Microsoft doesn’t think it’s a problem, as they announced today, and Aunty quotes:

“Our investigation has indicated that this is not a security vulnerability.”

Well.

Isn’t that special.

In other news, Internet security firm SafeScan announced today that another Microsoft Internet Explorer exploit “represented the highest number of hacking attacks in the second quarter”

And in yet other news, British security firm Mi2g has determined that the safest, most secure computing platforms available today are Apple’s OS X, and the Open Source platform of BSD.

You can read more about these here, here, and here.

Microsoft Says “IE URL Spoofability Not a Problem”

 Follow Anne on Twitter

 Twitter Explained in Plain English

 Friend Anne on Facebook

Previous Article « Beware This Spam Scam!
Read Next Article » Apple’s OS X and Open Source BSD Named Most Secure Operating Systems

Read more:

»  Microsoft Won’t..Oh, Wait…Will Fix DRM Flaw

»  Microsoft Releases Update for XP x64 Audio Problem (KB901105)

»  Windows ActiveX Flaw Still Active After Patch

»  Message to “Change Your Email Address” Mistakenly Sent to Windows Live Users

For additional similar stories check out our archives on Everything Else

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

 

2 Comments »

  1. As reported here by Aunty just days ago, there is a vulnerability in Microsoft Internet Explorer which allows bad people to make you think that you are clicking on a link for one site, and then redirecting you to another…

    Comment by Lockergnome's Windows Fanatics — 11/4/2004 @ 4:31 am

  2. Microsoft Says “IE URL Spoofability Not a Problem”. What?!? If you want to make sure you have no problem and you don’t want to use Firefox (why not?), then you can use SpoofStick for IE….

    Comment by Koldark's Komputer World — 11/4/2004 @ 5:56 am

RSS feed for comments on this post. TrackBack URI

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
 This article first appeared on 11/4/2004
The Internet Patrol
Patrolling the Internet for You!