PDA

View Full Version : Exploit for non-IE browsers (and why mozilla is better than opera)



major_small
02-07-2005, 01:32 PM
from slashdot (http://it.slashdot.org/article.pl?sid=05/02/07/1323206&tid=172&tid=113&tid=154&tid=95&tid=1): http://www.shmoo.com/idn/

and why mozilla is better than opera:

VI. Vendor Responses
...
Opera: They believe they have correctly implemented IDN, and will not be
making any changes.
Mozilla: Working on finding a good long-term solution; provided clear
workaround for disabling IDN.

ober
02-07-2005, 01:47 PM
http://my.opera.com/forums/showthread.php?threadid=80926

There are some major discussions in the Opera community boards and they all point to the fact that this exploit is not a "software bug". There is nothing you can really do to stop the user from clicking on a link that performs the exploit. The best they could do is to alert them that spoofing is actually occurring.

That is why Opera stated that they implemented IDN correctly. Not because they don't care. They are in fact looking into finding a way to alert the user that something like this is happening.

So run along to your little Firefox crowd and quit ........ing in the "elite" pool. ;)

ober
02-07-2005, 01:49 PM
P i s s is not allowed? WTF? What are we... 5 years old? :mad:

Oh, and another thing, as stated by many others, the best advice is to always go to popular money-exchange sites via bookmark or typed in URL.

Brian
02-07-2005, 02:04 PM
alternative browsers are for

ober
02-07-2005, 02:53 PM
Apparently some scaredy-cat weiner didn't like my comments. At least sign your name when you leave bad rep. :rolleyes:

pianorain
02-07-2005, 03:08 PM
alternative browsers are forI'm not convinced.

RoD
02-08-2005, 12:46 PM
That didnt work on me with opera 8 neta, wow.

-KEN-
02-08-2005, 02:57 PM
That didnt work on me with opera 8 beta, wow.

Um, I'm using Opera8 beta and it still worked. So is ober.

ober
02-09-2005, 10:44 AM
Yup. Did you get the "meow" screen?

RoD
02-09-2005, 11:29 AM
nope didnt do anything at all. not even a couldnt load error, it just does nadda.

RoD
02-09-2005, 11:30 AM
nope didnt do anything at all. not even a couldnt load error, it just does nadda.

CornedBee
02-09-2005, 11:38 AM
That's perhaps why it's a beta? Just judging by the number of dupes, you seem to be struggling with the browser. :)


Someone in some article somewhere actually claimed it a good sign that IE was "immune" to the "bug"...

major_small
02-09-2005, 08:58 PM
So run along to your little Firefox crowd and quit ........ing in the "elite" pool. ;)yeah yeah... I was kidding about the firefox being better thing, you know... I really don't give a damn what browser you use...

why can you write damn, but not pi(2*s)?

RoD
02-09-2005, 09:18 PM
That's perhaps why it's a beta? Just judging by the number of dupes, you seem to be struggling with the browser.

actually its fantastic and i havent had a single problem.

xxxrugby
02-10-2005, 04:35 PM
Firefox is FREE!

BMJ
02-10-2005, 06:23 PM
Your browser is bad and you should feel bad! :mad: :mad: :mad:

(Not a Firefox user)

DeepFyre
02-10-2005, 09:25 PM
Your browser is bad and you should feel bad! :( :( :(
(Not a whatever-browser-BMJ-uses user) ;)

sean
02-10-2005, 09:35 PM
Firefox is FREE!

So is Opera, and I don't recall *checks over shoulder* paying a bean for I.E. What's your point?

BMJ
02-10-2005, 09:36 PM
:( oic

major_small
02-10-2005, 10:45 PM
So is Opera, and I don't recall *checks over shoulder* paying a bean for I.E. What's your point?
since when was Opera Free (http://www.gnu.org/philosophy/free-sw.html)?

RoD
02-10-2005, 11:25 PM
their definition of free is moronic. I dont have to pay for opera, no one does. i did though, because its awsome.

major_small
02-10-2005, 11:52 PM
their definition of free is moronic. I dont have to pay for opera, no one does. i did though, because its awsome.
so you're saying that america is not 'free' because it costs money to live here?

are you also saying that merican HeritageŽ Dictionary of the English Language, Merriam-Webster's Dictionary of Law, WordNet 2.0, The Free On-line Dictionary of Computing, and CancerWEB's On-line Medical Dictionary all are wrong in their definiton of free?

the point is: the word 'free' really has very little to do with money.

http://dictionary.reference.com/search?q=free

RoD
02-11-2005, 12:05 AM
im saying i disagree with that.

major_small
02-11-2005, 12:17 AM
disagree with what? the english language? or the definition GNU decides to use in their licences, which currently has over 28,000 projects under them on freshmeat alone, which makes up for over 70% of all programs on the site?

http://freshmeat.net/stats/#license

edit: I'm just out for a short debate... not to pick on you or anything...

ober
02-11-2005, 07:29 AM
since when was Opera Free (http://www.gnu.org/philosophy/free-sw.html)?
Well... if we're going by that definition, IE/Firefox/Netscape/etc.... none of them are free.

Govtcheez
02-11-2005, 10:45 AM
so you're saying that america is not 'free' because it costs money to live here?
That's a moronic comparison.

Opera might not be "free" by that definition, but the last time I checked, I didn't pay any money for it, so that makes it free enough to the 99% of the population who doesn't feel the need to impress their definition of "free" to make themselves feel better.

edit: To clarify, just because GNU has their extremely limited definition doesn't change the fact that most people take "free" to mean "I didn't pay anything". I would expect to see that kind of reasoning on a place like Slashdot, but not here.

BMJ
02-12-2005, 11:33 PM
Your browser is bad and you should feel bad! :mad: :mad: :mad:

(Not a Firefox user)
I got a lot of negative rep for this.

Stop being such passionate morons. :rolleyes:

-KEN-
02-13-2005, 01:13 AM
Well... if we're going by that definition, IE/Firefox/Netscape/etc.... none of them are free.

Actually, Firefox does fit that definition. But Richard Stallman is a freak of nature.