Re: New thoughts on CSS

[Blue Boar <BlueBoar () thievco com>]

Matt Dickinson wrote:
> I saw this recently in a newsgroup, I can't believe it's real, and found
> no mention when browsing the news sections on either of the company
> websites. Isn't this a good example?
>
> > =- Manolo -=| wrote:
> http://www.microsoft.com&item%3Dq209354@212.254.206.213/1338825GHU_98.as
> p

That's a different class of problem.  As some have already advised, 
you need to RTFM:
http://www.microsoft.com&item=q209354 () hardware no/nyheter/feb01/Q209354%20-%20HOWTO.htm
:)

The @ is a delimiter between the authentication info, and the rest of the 
URL.  An easier to understand example is
http://username:password () www example com

This kind of confusion is probably just as effective as a good CSS attack, 
perhaps even more so.  Ever wonder how they got www. () stake com, when @ 
isn't a legal DNS character?

                                                BB