$ cat posts/microsofts-indifference.md

Microsoft's indifference

es Leer este post en español →

That seems to be the way Microsoft deals with its security problems.

Since June there has been a known vulnerability, discovered by Secunia, that allows spoofing and phishing using JavaScript. This outline sums up the vulnerability.

  1. The user visits a malicious site
  2. The user follows a trusted link
  3. Meanwhile, a malicious website opens a popup window in front of the browser, posing as a window from the trusted site.

This can be used for phishing.

(See the proof of concept at Secunia.com)

While Firefox fixed the problem 1 month later in version 1.0.5, Microsoft recommends that its users simply not browse sites they don’t trust! https://www.microsoft.com/technet/security/advisory/902333.mspx

That’s Microsoft’s way of solving its problems??? The bad part is that for Secunia this counts as a fix.

Comments

comments powered by Disqus