not just MS -- Malicious Web Pages Can Install Dashboard Widgets

[David Farber <dave () farber net>]

Begin forwarded message:

From: Monty Solomon <monty () roscom com>
Date: May 8, 2005 11:39:29 PM EDT
To: undisclosed-recipient:;
Subject: Malicious Web Pages Can Install Dashboard Widgets


Malicious Web Pages Can Install Dashboard Widgets
http://it.slashdot.org/it/05/05/08/2131208.shtml?tid=172&tid=179&tid=3

Posted by timothy on Sunday May 08, @05:49PM
from the not-good dept.

bonch writes "If you're running Safari on OS X Tiger and go to this
website, a 'slightly evil' Dashboard widget will be automatically
downloaded and installed and can't be removed without manually
removing the file from the Library folder and rebooting the computer.
The widget is called Zaptastic and is a demonstration by the author
of how easy it is to exploit Dashboard for nefarious purposes. The
essay, released under the Creative Commons License, goes on to
describe the many ways users can be taken advantage of--imagine porn
sites auto-installing adware widgets without your knowledge." So if
you're on a Mac, it would be smart to view that page with something
other than Safari.

...

http://it.slashdot.org/it/05/05/08/2131208.shtml?tid=172&tid=179&tid=3


    zaptastic: blueprint for a widget of mass destruction
    http://stephan.com/widgets/zaptastic/






-------------------------------------
You are subscribed as lists-ip () insecure org
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/