$ cat posts/microsofts-indifference.md
Microsoft's indifference
That seems to be the way Microsoft deals with its security problems.
Since June there has been a known vulnerability, discovered by Secunia, that allows spoofing and phishing using JavaScript. This outline sums up the vulnerability.
- The user visits a malicious site
- The user follows a trusted link
- Meanwhile, a malicious website opens a popup window in front of the browser, posing as a window from the trusted site.
This can be used for phishing.
(See the proof of concept at Secunia.com)
While Firefox fixed the problem 1 month later in version 1.0.5, Microsoft recommends that its users simply not browse sites they don’t trust! https://www.microsoft.com/technet/security/advisory/902333.mspx
That’s Microsoft’s way of solving its problems??? The bad part is that for Secunia this counts as a fix.

Comments
comments powered by Disqus