funsec mailing list archives

Re: Texas Bank Dumps Antivirus for Whitelisting


From: "Richard M. Smith" <rms () computerbytesman com>
Date: Thu, 17 Jul 2008 18:05:39 -0400

So under HA, a Web browser can only show ASCII text files.  After all, HTML
itself is a programming language with intermingled code (ie., HTML tags) and
data ("text").

Richard

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On
Behalf Of Rob, grandpa of Ryan, Trevor, Devon & Hannah
Sent: Thursday, July 17, 2008 6:30 PM
To: funsec () linuxbox org
Subject: Re: [funsec] Texas Bank Dumps Antivirus for Whitelisting

Date sent:              Thu, 17 Jul 2008 14:02:52 -0400
From:                   "Richard M. Smith" <rms () computerbytesman com>

But how does a Web browser running on a Harvard Architecture stop XSS
errors?  Code and data mixing happens within HTML and not at the binary
machine level.  You're now saying that we should ditch HTML with its
mixture of
tags, text, and script code are you?

Boy, you really *don't* know anything about computer architecture, do you?

Interpreting HTML on a Harvard architecture machine might be interesting,
but, 
in any case, there would not be any mixing of code and data.  Therefore, Web

browsing under Harvard architecture would not involve any active content, at
least 
not any that would be executed on the client (browser) machine.

======================  (quote inserted randomly by Pegasus Mailer)
rslade () vcn bc ca     slade () victoria tc ca     rslade () computercrime org
     (sqrt(-1)) before (2.71828), except after (186,242 miles/sec)
http://victoria.tc.ca/techrev/rms.htm
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: