Variant Day: [Tech] Our Interner Explorers are vulnerable to phising attacks

Friday, April 07, 2006

[Tech] Our Interner Explorers are vulnerable to phising attacks

I tried this browser test - and to my amazement my Internet Explorer 'IS' vulnerable...

U can try it for urself: http://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test/

And I tried it in Firefox too....and its rock steady. Are u still making up ur mind to switch over...wait no more :)

posted by Div @ 1:19 AM

5 Comments:

At 5:52 AM PDT, Unknown said…

hmm...sure is IE vulnerable..boy! am i glad firefox is good..
At 7:59 AM PDT, Amrita said…

nice template u have here, highly technie conscious.
At 1:36 AM PDT, Anitha said…

I tested...My IE is vulnerable too :-(
At 11:57 PM PDT, Div said…

Some vulneribilities like this look at us stark in the face. There're many that go unnoticed or require some fancy maneuver to be apparent.

Adhoc, Amrita...thanks for posting. At least we can be aware of this hitch and try to resolve it.
At 12:04 AM PDT, Div said…

Fortunately, it seems, we needn't wait for a Microsoft patch to set this right...we can do it ourselves:

Go to Tools -> Options, click the security tab, then click on 'Custom Level'

Scroll down until you find 'Navigate sub-frames across diffrent domains'; set it to prompt or disable.

The test fails if you set it to disable, and it will ask you if its allowed (to exploit you) if you set it to prompt.

I tried it and it works...guess i'll let this setting stay for a while (and wonder if some websites fail to render due to this setting). Better safe than sorry, right!