Bugtraq mailing list archives

Re: New DDoS?


From: Darren Reed <avalon () COOMBS ANU EDU AU>
Date: Wed, 10 Jan 2001 16:57:07 +1100

In some mail from Ryan Russell, sie said:
[...]
The attack would have to be subtle (i.e. not crash the browser) and the
site would have to be popular, but not very carefully watched by the
administrators.  In fact, given a powerful enough hole, this is a good way
to build an army of traditional zombies.  Or steal loads of personal info
off of clients.

What about placement (or addition) of an ActiveX control (which downloads
into IE on the quiet) that's not quite so benign ?

Darren


Current thread: