Forgot your password?

Close
typodupeerror
Security

Major ISPs Injecting Ads, Vulnerabilities Into Web

Submitted by Rebecca Bug
Rebecca Bug writes "Several Web sites (Wired, eWEEK, WaPo) are reporting on Dan Kaminsky's Toorcon discussion of a serious security risk introduced when major ISPs serve ads on error pages. Kaminsky found that the advertising servers are impersonating, via DNS, hostnames within trademarked domains. "We have determined that these injected servers are, in fact, vulnerable to cross-site scripting attacks. Since these servers are being injected into your trademarked domains, their vulnerability can be used to attack your users and your sites," Kaminsky said, identifying EarthLink, Verizon and Quest among the ISPs."
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Major ISPs Injecting Ads, Vulnerabilities Into Web More

Major ISPs Injecting Ads, Vulnerabilities Into Web

Comments Filter:

"Don't discount flying pigs before you have good air defense." -- jvh@clinet.FI