Full Disclosure mailing list archives
RE: DANGER ZONE: Internet Explorer
From: "http-equiv () excite com" <1 () malware com>
Date: Mon, 29 Dec 2003 19:42:13 -0000
You can read more about IE Security Settings at
http://www.microsoft.com/windows/ie/using/howto/security/settings.asp
from which we can also read about the Trusted Zone that you should: "Add a site to this zone only if you trust that it would never
cause
harm to your computer." Giving any site additional executional privileges means that you
are
extending your level of trust. You are trusting that the site in question does not get compromised and have its content replaced
with
malicious code, and you are trusting that the site does not have
any XSS
errors that would allow harmful code injection into the HTML
stream. It doesn't actually say that. From the link you provided it says is: "For example, you might put well-known entertainment or shopping sites in the Trusted sites zone with its low levels of security." You're saying what we are saying and illustrating, not what they are saying. That's the whole point. See what I am saying. -- http://www.malware.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- DANGER ZONE: Internet Explorer http-equiv () excite com (Dec 26)
- <Possible follow-ups>
- RE: DANGER ZONE: Internet Explorer tlarholm (Dec 29)
- RE: DANGER ZONE: Internet Explorer http-equiv () excite com (Dec 29)