Pefect Example of IE at its BEST!

compuXP · 07-05-2006, 04:39 PM

http://www.zdnet.com.au/news/softwar...9262246,00.htm

Microsoft has denied that a 'trick', which could allow an executable file to be launched when a user types a Web address into Internet Explorer, is a security vulnerability.

Using Windows XP and Internet Explorer, it is easy to create a scenario where a user types in a Web address -- such as www.microsoft.com -- into their browser and instead of the launching the Web site, the browser runs an executable file that is located on the user's computer.

To test the 'trick' yourself, try the following:

Right click on the Desktop and create a new Shortcut
Point the shortcut to an executable -- such as c:\windows\system32\calc.exe
Call the shortcut www.microsoft.com
Start Internet Explorer and type "www.microsoft.com" into the address bar
If the shortcut is then deleted -- or the characters "http://" are added before the "www" in the browser address bar -- then IE will once again connect to the Internet as expected.

In a statement to ZDNet Australia on Tuesday, Peter Watson, chief security advisor at Microsoft Australia, said this is not a security vulnerability but actually a feature that could be used by legitimate applications.

--------------------------------------

"could be used by legitimate applications." - but doesn't he realize that it WON'T?

'Nuff said

This is why you need to GET FIREFOX.

-Matt

Daniel Malone · 07-05-2006, 04:47 PM

Interesting! I've already got Firefox, but I still prefer IE just because that's what I'm used to.

jumpenjuhosaphat · 07-05-2006, 04:57 PM

The question is, does it run an executable that already exists on my computer, or does it somehow load my computer with it's own executalbe over the net?
Oh, and some interesting stuff from my webstats.....50.1% are IE users, followed close by FF at 45%.

Update:
IE-43%
FF-50.6%

compuXP · 07-05-2006, 08:13 PM

It has to already be on your computer, but websites using IE can create these shortcuts without your knowledge and then... when you click a link... there you go: harmful programs exceute themselves.

Yes, your computer - Windows - has harmful programs on them if they are run at a time other than startup or with incorrect parameters.

I hate Windows...

jumpenjuhosaphat · 07-05-2006, 08:36 PM

[Off subjuct a bit] I hate windows too. Although I had an up time of 3 weeks until Monday morning, when I got attacked by trojan horses. 3 weeks is the longest I have ever been up, before that, I was lucky to go a full day without shutting down.

stOx · 07-06-2006, 03:00 AM

Quote:

Originally Posted by Daniel Malone

Interesting! I've already got Firefox, but I still prefer IE just because that's what I'm used to.

Famouse last words.

I don't even see why they would include this "feature".. What purpose does it serve?

TvpAvi · 07-06-2006, 02:47 PM

heres the thing it has taken so long for IE to get better and get a new version that SOOO many people have switched firefox and wont switch back so in my opinion when v7 comes out its going to be trashed...sorry

Zack · 07-06-2006, 04:28 PM

Couldn't you just type C:\setup.exe in the address bar and it would work?
HTMLGuy

compuXP · 07-06-2006, 05:29 PM

Quote:

Originally Posted by htmlguy

Couldn't you just type C:\setup.exe in the address bar and it would work?
HTMLGuy

Yeah, but people usually type web addresses into their browser. This makes it more disguised.

Besides, what's the fun in exploiting obvious security holes like that?

dhundee · 07-06-2006, 07:32 PM

I too hate windows, but we need to accept the fact that so far it's the easiest for newbies and advanced users alike, especially on desktop processing.

that's a sad thing, the more we hate it, the more we use it, and the more it irritates us.

for IE, i hate it when it does not follow regular CSS standards and you need to do some tweaks to make it behave, and suddenly you are messed up with firefox, safari and others...

compuXP · 07-06-2006, 08:18 PM

Quote:

Originally Posted by dhundee

but we need to accept the fact that so far it's the easiest for newbies and advanced users alike, especially on desktop processing.

Nah, we don't... have you ever even USED a Mac?

The only reason I use Windows is because when I got my machine, I was a software developer and needed a wide market. I want a Mac so badly...

Daniel Malone · 07-06-2006, 08:34 PM

Windows could be alot better, but I like Windows. If there were another good operating system (besides Linux) that would run adobe software, I would look into it.

compuXP · 07-06-2006, 08:47 PM

Quote:

Originally Posted by Daniel Malone

Windows could be alot better, but I like Windows. If there were another good operating system (besides Linux) that would run adobe software, I would look into it.

Then start looking into a Mac, Daniel

Daniel Malone · 07-06-2006, 08:53 PM

Mac has recently been doing heavy advertising. I've looked into it, but I'm not sure if Mac's are good.

compuXP · 07-07-2006, 12:11 AM

Have you USED a Mac, though? If not, use it. Otherwise you just say that in ignorance

07-05-2006, 04:39 PM	#1
compuXP Retired Member Join Date: Dec 2005 Posts: 139	Pefect Example of IE at its BEST! http://www.zdnet.com.au/news/softwar...9262246,00.htm Microsoft has denied that a 'trick', which could allow an executable file to be launched when a user types a Web address into Internet Explorer, is a security vulnerability. Using Windows XP and Internet Explorer, it is easy to create a scenario where a user types in a Web address -- such as www.microsoft.com -- into their browser and instead of the launching the Web site, the browser runs an executable file that is located on the user's computer. To test the 'trick' yourself, try the following: Right click on the Desktop and create a new Shortcut Point the shortcut to an executable -- such as c:\windows\system32\calc.exe Call the shortcut www.microsoft.com Start Internet Explorer and type "www.microsoft.com" into the address bar If the shortcut is then deleted -- or the characters "http://" are added before the "www" in the browser address bar -- then IE will once again connect to the Internet as expected. In a statement to ZDNet Australia on Tuesday, Peter Watson, chief security advisor at Microsoft Australia, said this is not a security vulnerability but actually a feature that could be used by legitimate applications. -------------------------------------- "could be used by legitimate applications." - but doesn't he realize that it WON'T? 'Nuff said This is why you need to GET FIREFOX. -Matt __________________ Retired Moderator/Member/Friend/Helper - it was great working with all of you!

07-05-2006, 04:47 PM	#2
Daniel Malone Senior Member Join Date: May 2006 Posts: 252	Re: Pefect Example of IE at its BEST! Interesting! I've already got Firefox, but I still prefer IE just because that's what I'm used to. __________________ Webmaster News and Daniel's blog can be found at Daniel Malone Free Webmaster Tools

07-05-2006, 04:57 PM	#3
jumpenjuhosaphat Forum Admin Contributor Join Date: Jun 2006 Location: Denver Posts: 4,459	Re: Pefect Example of IE at its BEST! The question is, does it run an executable that already exists on my computer, or does it somehow load my computer with it's own executalbe over the net? Oh, and some interesting stuff from my webstats.....50.1% are IE users, followed close by FF at 45%. Update: IE-43% FF-50.6% __________________ Storage Sheds Lost Forum Last edited 07-05-2006 at 10:08 PM.

07-05-2006, 08:13 PM	#4
compuXP Retired Member Join Date: Dec 2005 Posts: 139	Re: Pefect Example of IE at its BEST! It has to already be on your computer, but websites using IE can create these shortcuts without your knowledge and then... when you click a link... there you go: harmful programs exceute themselves. Yes, your computer - Windows - has harmful programs on them if they are run at a time other than startup or with incorrect parameters. I hate Windows... __________________ Retired Moderator/Member/Friend/Helper - it was great working with all of you!

07-05-2006, 08:36 PM	#5
jumpenjuhosaphat Forum Admin Contributor Join Date: Jun 2006 Location: Denver Posts: 4,459	Re: Pefect Example of IE at its BEST! [Off subjuct a bit] I hate windows too. Although I had an up time of 3 weeks until Monday morning, when I got attacked by trojan horses. 3 weeks is the longest I have ever been up, before that, I was lucky to go a full day without shutting down. __________________ Storage Sheds Lost Forum

07-06-2006, 02:47 PM	#7
TvpAvi Junior Member Join Date: Apr 2006 Location: New York City Posts: 31	Re: Pefect Example of IE at its BEST! heres the thing it has taken so long for IE to get better and get a new version that SOOO many people have switched firefox and wont switch back so in my opinion when v7 comes out its going to be trashed...sorry __________________ TutorialVisionProductions

07-06-2006, 04:28 PM	#8
Zack Junior Guru Join Date: Dec 2005 Location: North Carolina Posts: 759	Re: Pefect Example of IE at its BEST! Couldn't you just type C:\setup.exe in the address bar and it would work? HTMLGuy __________________ yaxal releases '07

07-06-2006, 07:32 PM	#10
dhundee Smurf Join Date: Jul 2006 Posts: 11	Re: Pefect Example of IE at its BEST! I too hate windows, but we need to accept the fact that so far it's the easiest for newbies and advanced users alike, especially on desktop processing. that's a sad thing, the more we hate it, the more we use it, and the more it irritates us. for IE, i hate it when it does not follow regular CSS standards and you need to do some tweaks to make it behave, and suddenly you are messed up with firefox, safari and others... __________________ http://www.kabarkada.net http://www.isulong-seoph.org

07-06-2006, 08:34 PM	#12
Daniel Malone Senior Member Join Date: May 2006 Posts: 252	Re: Pefect Example of IE at its BEST! Windows could be alot better, but I like Windows. If there were another good operating system (besides Linux) that would run adobe software, I would look into it. __________________ Webmaster News and Daniel's blog can be found at Daniel Malone Free Webmaster Tools

07-06-2006, 08:53 PM	#14
Daniel Malone Senior Member Join Date: May 2006 Posts: 252	Re: Pefect Example of IE at its BEST! Mac has recently been doing heavy advertising. I've looked into it, but I'm not sure if Mac's are good. __________________ Webmaster News and Daniel's blog can be found at Daniel Malone Free Webmaster Tools

07-07-2006, 12:11 AM	#15
compuXP Retired Member Join Date: Dec 2005 Posts: 139	Re: Pefect Example of IE at its BEST! Have you USED a Mac, though? If not, use it. Otherwise you just say that in ignorance __________________ Retired Moderator/Member/Friend/Helper - it was great working with all of you!

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode