Re: [SLUG] IE _not_ included in new URL spoof exploit

From: 404 (matthew@textbox.net)
Date: Mon Feb 07 2005 - 21:58:27 EST


On Mon, 2005-02-07 at 21:41, perthie wrote:
> I would expect to see "www.pаypal.com/" In the status bar, but I
> see "www.paypal.com" with either setting in firefox. Is this not what I
> should be looking at? By the way, I get the same results in IE.

Once the setting is set to "False" it should error that the site could
not be found. In my Firefox - Mozilla/5.0 (X11; U; Linux i686; en-US;
rv:1.7.5) Gecko/20041109 Firefox/1.0 - it says "the site www.paypal.com
could not be found" so the spoofing technically does still work (I get
the error with paypal.com, not pаypal.com), it just does not send
you to the spoofed destination.

-- 
404 <matthew@textbox.net>
Textbox Networks

----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:44:36 EDT