Educause Security Discussion mailing list archives

Re: Firesheep/Cain& Able


From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Mon, 1 Nov 2010 14:23:24 -0400

On Mon, 01 Nov 2010 09:39:09 PDT, Isac Balder said:

Inform and educate users of sites that allow CSRF, XSS, etc.

"Dear Users: Most websites, including a lot that you'd expect better from, are
vulnerable to CSRF and XSS attacks. Be careful out there..."

Remember - "Web 2.0" isn't all that far from an *intentional* XSS attack. :)

Given that, I wonder what sane and useful advice you could actually give users.

Attachment: _bin
Description:


Current thread: