Re: Web Site Hacks

["-= ArkanoiD =-" <ark () mpak convey ru>]

nuqneH,

> Date: Tue, 2 Dec 1997 21:10:19 GMT
> From: Edward Cracknell <edward () securIT net>
> To: "Firewall Wizards (Marcus J. Ranum's new moderated mail list)" <firewall-wizards () nfr net>
> Subject: Web Site Hacks
> Web Site Hacks:

[dd]

> Philip raised a great thread in a direct mail to me, the essence of it
> was how web sites could be compromised. As a Java dunce, I'd love some
> input from you guys. Here's how I see it:

[dd]

> I know I've missed all the ActiveX and Java. Can we thrash these
> vulnerabilities out here?

Hmm, Java/ActiveX are browser-side things too, so they can be used (directly)
to hack browsers only, not web sites (although there could be some indirect
compromises ;)

Or do i miss something?

--- 
                                       _     _  _  _  _      _  _
   Must be a visit from the dead..     _| o |_ | | _|| |   / _||_|   |_ |_ |_
   CU in Hell ..........  Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|