New URI Browser Flaws Worse Than First Thought 149
narramissic writes "URI (Uniform Resource Identifier) bugs have become a hot topic over the past month, since researcher Thor Larholm showed how a browser could be tricked into sending malformed data to Firefox. Now, security researchers Billy Rios and Nathan McFeters say they've discovered a number of ways attackers could misuse the URI protocol handler technology to steal data from a victim's computer. 'It is possible through the URI to actually steal content form the user's machine and upload that content to a remote server of the attacker's choice,' said McFetters, a senior security advisor for Ernst & Young Global Ltd. 'This is all through functionality that the application provides.'"
Re:News? (Score:5, Funny)
Thanks dude!
I installed that update to XP, and now my computer runs like a dream. Microsoft finally got it right!
Whew... (Score:5, Funny)
Re:News? (Score:4, Funny)
Re:Web 2.0 developers have betrayed us all (Score:4, Funny)
Re:Microsoft do it again (Score:1, Funny)
Re:News? (Score:4, Funny)
Damn! (Score:2, Funny)