Full Disclosure mailing list archives

another product affected by recent MS IE '@' patch


From: martin f krafft <madduck () madduck net>
Date: Sun, 8 Feb 2004 18:24:38 +0100

In Germany, and maybe in other parts of the world, some providers
are attracting customers by announcing webpage packages where email
address == web address. so, john () doe de is the email, and
john () doe de is the website, while jane () doe de may be the website of
john's wife.

I hope this has not been reported yet, but in the light of the
recently announced MS IE patch to guard against the URL obfuscation
attacks (which is a typical MS fix and absolutely ridiculous), these
providers may now renew their product portfolio. Not like M$
cares...

-- 
martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
 
invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver!
 
last year, out in california, at a pc users group, there was a demo of
smart speech recognition software. before the demonstrator could begin
his demo, a voice called out from the audience: "format c, return.
yes, return." a short demo it was.

Attachment: signature.asc
Description: Digital signature


Current thread: