Full Disclosure mailing list archives

Re: Re: shell:windows


From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Tue, 13 Jul 2004 10:14:47 +1200

No - there are numerous ways to force input into places like the address 
bar.  As someone else already stated, for this to work you have to be 
able to push it into that area.  There are numerous ways to do this and 
for a person with a little more time on their hands, finding one that 
works properly should not be difficult.

Stop thinking about this as being a one-dimensional issue.  Security 
issues very rarely are that one-dimensional. 

Hey guys -- stop picking on Larry.

If Microsoft gets to think one dimensionally about security, why 
shouldn't eWeek's "Security Center Editor" be able to do the same?


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: