Text 5649, 272 rader
Skriven 2005-07-03 20:03:00 av Rich (1:379/45)
Kommentar till text 5646 av Geo (1:379/45)
Ärende: Re: An Army of Soulless 1's and 0's
===========================================
From: "Rich" <@>
This is a multi-part message in MIME format.
------=_NextPart_000_005F_01C5800A.3718D610
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Your example is a web page that discusses the confirmation dialog =
that you do get? If you were to say that some web pages bombard the = user
with UI to confuse or mislead them I would agree. This does not = claim as you
do that there is no confirmation. Just the opposite in = fact.
Your example also has nothing to do with the confirmations that are =
required for changing the home page or adding a favorite. Either you = can not
understand or you want to pretend you don't.
Rich
"Geo" <georger@nls.net> wrote in message news:42c85512@w3.nls.net...
You're the one pretending web pages can't do installs without =
confirmation
http://www.webhelper4u.com/nontransponders/wallpapers4u_4022005.html
read and tell me how nicely the browser gives you a choice and how a =
web page can't bypass it.
Geo.
"Rich" <@> wrote in message news:42c81c72@w3.nls.net...
No because you either can not understand or want to pretend you =
don't.
Rich
"Geo" <georger@nls.net> wrote in message =
news:42c7f81d@w3.nls.net...
I don't have realplayer or quicktime. Wanna try again?
Geo.
"Rich" <@> wrote in message news:42c75faf$1@w3.nls.net...
This is the nonsense you come up with? You mentioned eeye =
which I noticed just announced that real player has a heap overflow = which
they gladly describe to the detriment of everyone that uses real = player. And
this is the kind of nonsense you use as an example of how = adding a favorite
side steps confirmation. You had an application = running on your machine and
making the change. Web pages can't do this = without confirmation.
Applications can do what you can.
Rich
"Geo" <georger@nls.net> wrote in message =
news:42c75843@w3.nls.net...
By using the features Microsoft has provided, namely scripting =
and controls that are marked safe for scripting.
The technique has been around for a while and is described =
here http://www.microsoft.com/technet/security/bulletin/fq99-032.mspx
those particular ones are patched and I don't know what =
controls they are currently using but it's still happening to fully = patched
systems, I've found my favorites modified several times this = year but I've
never managed to figure out what site did it, the change = was completely
stealth.
Geo.
"Rich" <@> wrote in message news:42c731e0@w3.nls.net...
How?
Rich
"Geo" <georger@nls.net> wrote in message =
news:42c7054e$2@w3.nls.net...
The confirmation can be bypassed by the website.
Geo.
"Rich" <@> wrote in message =
news:42c6d5a7$1@w3.nls.net...
There is a confirmation when a web page tries to add =
a favorite or change your home page. Why would you lie about stuff like =
this?
Rich
------=_NextPart_000_005F_01C5800A.3718D610
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2668" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff background=3D"">
<DIV><FONT face=3DArial size=3D2> Your example is a web page =
that=20
discusses the confirmation dialog that you do get? If you were to = say
that=20
some web pages bombard the user with UI to confuse or mislead them I = would=20
agree. This does not claim as you do that there is no =
confirmation. =20
Just the opposite in fact.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2> Your example also has =
nothing to do=20
with the confirmations that are required for changing the home page or = adding
a=20
favorite. Either you can not understand or you want to pretend you =
don't.</FONT></DIV><FONT face=3DArial size=3D2>
<DIV><BR>Rich</DIV>
<DIV></FONT> </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Geo" <<A =
href=3D"mailto:georger@nls.net">georger@nls.net</A>> wrote=20
in message <A=20
=
href=3D"news:42c85512@w3.nls.net">news:42c85512@w3.nls.net</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>You're the one pretending web pages =
can't do=20
installs without confirmation</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><A=20
=
href=3D"http://www.webhelper4u.com/nontransponders/wallpapers4u_4022005.h=
tml">http://www.webhelper4u.com/nontransponders/wallpapers4u_4022005.html=
</A></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>read and tell me how nicely the =
browser gives you=20
a choice and how a web page can't bypass it.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Geo.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Rich" <@> wrote in message <A=20
=
href=3D"news:42c81c72@w3.nls.net">news:42c81c72@w3.nls.net</A>...</DIV>
<DIV><FONT face=3DArial size=3D2> No because you either =
can not=20
understand or want to pretend you don't.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Rich</FONT></DIV>
<DIV> </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Geo" <<A =
href=3D"mailto:georger@nls.net">georger@nls.net</A>>=20
wrote in message <A=20
=
href=3D"news:42c7f81d@w3.nls.net">news:42c7f81d@w3.nls.net</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>I don't have realplayer or =
quicktime. Wanna=20
try again?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Geo.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Rich" <@> wrote in message <A=20
=
href=3D"news:42c75faf$1@w3.nls.net">news:42c75faf$1@w3.nls.net</A>...</DI=
V>
<DIV><FONT face=3DArial size=3D2> This is the =
nonsense you come=20
up with? You mentioned eeye which I noticed just announced =
that=20
real player has a heap overflow which they gladly describe to =
the=20
detriment of everyone that uses real player. And this is =
the kind=20
of nonsense you use as an example of how adding a favorite side =
steps=20
confirmation. You had an application running on your =
machine and=20
making the change. Web pages can't do this without=20
confirmation. Applications can do what you =
can.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Rich</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: =
5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Geo" <<A=20
href=3D"mailto:georger@nls.net">georger@nls.net</A>> wrote =
in message=20
<A=20
=
href=3D"news:42c75843@w3.nls.net">news:42c75843@w3.nls.net</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>By using the features =
Microsoft has=20
provided, namely scripting and controls that are marked safe =
for=20
scripting.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>The technique has been around =
for a while=20
and is described here <A=20
=
href=3D"http://www.microsoft.com/technet/security/bulletin/fq99-032.mspx"=
>http://www.microsoft.com/technet/security/bulletin/fq99-032.mspx</A></FO=
NT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>those particular ones are =
patched and I=20
don't know what controls they are currently using but it's =
still=20
happening to fully patched systems, I've found my favorites =
modified=20
several times this year but I've never managed to figure out =
what site=20
did it, the change was completely stealth.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Geo.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: =
5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Rich" <@> wrote in message <A=20
=
href=3D"news:42c731e0@w3.nls.net">news:42c731e0@w3.nls.net</A>...</DIV>
<DIV><FONT face=3DArial size=3D2> =
How?</FONT></DIV><FONT=20
face=3DArial size=3D2>
<DIV><BR>Rich</DIV>
<DIV></FONT> </DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: =
5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Geo" <<A=20
href=3D"mailto:georger@nls.net">georger@nls.net</A>> =
wrote in=20
message <A=20
=
href=3D"news:42c7054e$2@w3.nls.net">news:42c7054e$2@w3.nls.net</A>...</DI=
V>
<DIV><FONT face=3DArial size=3D2>The confirmation can be =
bypassed by=20
the website.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Geo.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; =
MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Rich" <@> wrote in message <A=20
=
href=3D"news:42c6d5a7$1@w3.nls.net">news:42c6d5a7$1@w3.nls.net</A>...</DI=
V>
<DIV><FONT face=3DArial size=3D2> There is a =
confirmation when a web page tries to add a favorite or =
change=20
your home page. Why would you lie about stuff like =
this?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial=20
=
size=3D2>Rich</FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQ=
UOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_005F_01C5800A.3718D610--
--- BBBS/NT v4.01 Flag-5
* Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)
|