Re: Active-content filtering (was RE: Buffer Overruns)

["Ryan Russell" <Ryan.Russell () sybase com>]

> They simply have no idea
> whatsoever that these scripting languages put their customers' clients at
> risk. It doesn't even register.
>
>    The New York Times site is the worst. Not only does it require cookies,
> but if you want to complain about THAT practice, their form letter is
> Javascript
> driven.

That's easy to fix.  Just get the HFG guys to deface the website again,
only this time leave it looking normal and insert some evil Javascript that
all the old browers are vulnerable to.

That's only partially a joke.  I'm waiting for a defacement that does exactly
that.  This solves the problem of how do you put up evil web content
without it being traceable back to you (other than for demonstrations
purposes, of course.)

                         Ryan