Vulnerability Development mailing list archives

Re: Micro$oft wants to dominate the world!??


From: john <john () triton net>
Date: Mon, 27 Aug 2001 17:36:36 -0400

This can be avoided by selecting "do not search from address bar" under tools | internet options | advanced in 4.0-5.02 
generally speaking.

8/28/2001 1:15:36 AM, Syzop <syz () dds nl> wrote:

When you type a non-existing domain name in internet explorer
you get redirected to some auto.search.msn.com thing....
I don't know when this was introduced, but AFAIK this was in
IE5 and not in IE4... Anyway, normally you get some (stupid)
general error page (from your local hd?).. but now you really get a
page online:
== <snip> ==
"We can't find "<domain>".
Click Go to try your address again.
[<domain>                       ] [Go]
Or, correct the spelling of your address above and click Go.

See more results for "<domain>" at MSN Search.
-----------
Get help
See technical details

Powered by: <%$&#$ logo> MSN Search
== </snip> ==

I think this time micro$oft has really gone way too far...
They can see every non-existing domain lookup from IE users...
They can redirect every user to some stupid site of them (actually
they are doing that right now) if somebody types an non-existing name.
I also noticed (when searching in the registry) the domain is added
to safe zone's or something.. mmm!

My question is: is it possible to edit some dll/exe/whatever to remove
this behavior (so apart from methods like adding your own auto.search.msn.com
record in your dns server [or hosts] and firewalling the whole msn stuff).

   Syzop.

PS: Note: this message was written in just a few minutes, it's very likely
     some things are incorrect
PSS: Some users (including me) are panicing and switching (back) to NS.








Current thread: