Journaling on estrip is easy and free. sign up here

Computer's Journal

computer
My Podcast Link

02/17/2006 15:05 #21547

Windows IE security issue with clipboard
Category: security
I just accidentally discovered a major security bug in IE for windows. Copy something into your cliboard from any application and then visit this page I created. The data will be alerted and although I am not collecting the data anyone could use this technology to steal and forward whatever information was in your clipboard when you visited their web page. Just think about what you copy into your clipboard when using IE, your passwords, your bank account info, etc. Get firefox

--paul


ajay - 02/17/06 20:21
Well, I tried it and the dialog box was empty. I had put stuff in my clipboard. Maybe my machine is patched?
Who cares.. I use Linux anyways (but I do have a Windows box for downloading... documentaries).
jenks - 02/17/06 19:51
yet another reason microsoft pisses me off...
jason - 02/17/06 18:47
See, and Josh constantly bitches about Firefox. He's like, "Damn Jay why do you use that shitty ass browser?"

Someone help him understand why Firefox is so much better! I give up!
kara - 02/17/06 17:07
Paul is totally right. The error pops up in a dialog box/window, and he's able to record what was displayed in that window. This poses a huge security risk - for individuals, businesses - heck, even government agencies. I'm using IE6.
computer - 02/17/06 16:23
It works in IE. It is not on a local server and I am sure.
ajay - 02/17/06 16:06
Just tried it, got nothing. Are you sure?
Maybe you were loading the files from local disk (which has different permissions than a page from the web)?

02/16/2006 17:47 #21546

Camino 1.0 released
Category: browsers

Camino 1.0 brings you a heavily-updated version of the only native Mac OS X browser using Mozilla's Gecko rendering engine. Thousands of bugs were fixed in Gecko 1.8, providing users with improved web page compatibility.



more info:

01/31/2006 15:05 #21545

Microsoft Developer Toolbar
Category: web
Microsoft has finally come out with a developer toolbar like the one firefox has. It could have saved me thousands of hours had they realeased this before but at least it is a step iun the right direction.

image

01/31/2006 00:05 #21544

face the nation
Works for me! Thanks.

Does anyone else get nostalgic for "vintage" [inlink]twisted,296[/inlink] computer memorabilia? I wish I had screenshots of some of my old desktops.


01/30/2006 21:47 #21543

Internet Privacy
Category: privacy
Privacy? What Privacy?

I think that for the vast majority of internet users, privacy is just an illusion. Even if you use a firewall, http (Hyper Text Transfer Protocol) sends all sorts of data about you, your computer, your browser and even your monitor's screen resolution to the websites that you surf.

Your IP

When you surf the internet, your connection is uniquely identified by an IP (internel Protocol) number. If you are on a LAN (Local Area Network) you may share that IP with others on the same network.

In general terms for people who surf the 'net at home, knowing a user's IP is enough to find him or her. But . . .

image

The above is a screenshot with firefox on the left running tor (more about that later in this journal) and konqueror on the right. Both browsers show the ipchicken website which shows my old Linux box's IP. Notice that two different IPs are being returned at the same time.



Privacy at an Internet Cafe?

That's why some people go to internet cafes to surf the 'net. But even that can be problematic since the IP can be traced back to the cafe and computers can be forensically examined - most computers retain much data related to surfing the net - cookies, cached data, etc.

And that is why some people get online at internet cafes using "live cd" operating systems that boot and run entirely from the cd without writing any data to the hard drive. Some good Linux live cds that I have used are SimplyMepis Knoppix Kanotix PCLinuxOS Ubuntu and Slax

But that still does not solve the IP problem. There are also several live cds that are designed for getting online anonymously and privately including Anonym.OS (an OpenBSD distrobution) and Phantomix

Tor - privacy at home?

The Electronic Frontier Foundation recommends the use of Tor

Your traffic is safer when you use Tor, because communications are bounced around a distributed network of servers, called onion routers. Tor's technology aims to provide Internet users with protection against "traffic analysis," a form of network surveillance that threatens personal anonymity and privacy, confidential business activities and relationships, and state security.



I installed and set up tor and firefox on my old Linux box this evening, and it seems to work as promised. Given the nature of how tor works browsing even on a broadband connection is slower.