Monday, 12. October 2009, 22:11:57
browsers, execution, threat, flash
...
You have your custom virus scanner and your custom firewall active, right? This threat will make all of that mean nothing at all.
http://www.adobe.com/support/security/bulletins/apsb09-15.htmlArbitrary code execution on a web page visitor's computer by sending malicious javascript through Adobe Flash.
Guess what problems will arise with local off-line storage in HTML5?
Thus, by default, treat the web and every page on it as a potential threat. It's a dangerous place and people want to wreak havoc.
- Turn off plug-ins and javascript unless you trust the page and need the functionality.
- Make it easy on yourself to turn them off and on based on what page or domain you visit: use the Opera browser.
- The less fortunate that get stuck with Firefox can use the NoScript extension.
- For those who are forced to use Microsoft's excuse for a web browser... avoid the web altogether.
Wednesday, 16. May 2007, 14:42:54
URI, Tech, Security, Web
...
No match.
Bloody briljant. In 1998 some people came up with a way of enclosing a file source into an HTML or CSS file so you wouldn’t need to link to an outside file.
Where does this come in handy?
Well in all those pretty e-mails of course, sent to you by a handful of spammers and a friend or two. We can now send the pretty image we wish to show as part of the HTML itself, so we don’t need to perform dirty tricks like cross-referencing attachments or bypassing network firewalls.
Makes rich-text e-mails safe again.
Guess which browser doesn’t support Data URI’s?
Yup, the world’s most used one. Thank you, Microsoft, for refusing to improve the security of your systems since 1998.
Description:
http://en.wikipedia.org/wiki/Data:_URI_schemeSpecification:
http://tools.ietf.org/html/rfc2397