Re: Netscape forms using standard windows controls

[peak () ARGO TROJA MFF CUNI CZ (Pavel Kankovsky)]

On Sun, 21 May 2000, No User wrote:

> Back to NS: you can easily subclass a window, say, a password edit
> field - no big deal. If NS reads the form data, it will read the
> contents of the window. So, forms filling can be done but you can do
> all kinds of nasty things, too: such as sending the pwd somewhere
> else, or (if you want to make someones life miserably), garble the
> contents so that all login attempts to secure sites will fail.

What you say here is that anyone controlling the user's desktop can mess
with applications running there. Nothing new. MSIE (or Outlook) might
appear to be less vulnerable but they are just hiding under an extra
layer of obfuscation.

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."