tag:blogger.com,1999:blog-7876560611515310173.post7564965183299299834..comments2009-04-24T17:36:42.558-05:00redDEADhttp://www.blogger.com/profile/07778199165854076395noreply@blogger.comBlogger5125tag:blogger.com,1999:blog-7876560611515310173.post-29032052685500926302009-03-27T13:55:00.000-05:002009-03-27T13:55:00.000-05:00@Drew Martell<BR/><BR/>http://en.wikipedia.org/wiki/Cross_site_scripting<BR/><BR/>At a recent Pwn2Own contest at Cansec, security researchers exploited just about every common browser, except Google's Chrome because of its unique sandboxing environment.<BR/><BR/>Doesn't matter if you surf "safe" sites, if those sites can be compromised with CSS attacks. Having your box compromised is no longer about downloading a virus. You can read the wrong email and be compromised. You can be exploited through an unpatched Windows vulnerability. You can visit a legitimate website with a CSS vulnerability and be compromised.<BR/><BR/>Recent example.<BR/>http://en.wikipedia.org/wiki/Conficker<BR/><BR/>Please stop spreading poor security practices. Use an AV, use a personal firewall, patch your OS and your applications frequently, use NoScript, etc. etc. Don't even get me started if you're running an actual server on your windows box.<BR/><BR/>The Internet is a dangerous place.Aenigmahttp://www.blogger.com/profile/00738544155276965045noreply@blogger.comtag:blogger.com,1999:blog-7876560611515310173.post-66117638937421870432009-01-30T21:14:00.000-06:002009-01-30T21:14:00.000-06:00This comment has been removed by the author.Drew Martellhttp://www.blogger.com/profile/05390166836217767749noreply@blogger.comtag:blogger.com,1999:blog-7876560611515310173.post-51545242111324645212009-01-21T23:01:00.000-06:002009-01-21T23:01:00.000-06:00Sounds interesting, but I wouldnt write the persons name. It was embarrassing once probably and now you are showing it again for even more people. Thats an empathic point of view. Thanks.r4wMUnt34khttp://www.blogger.com/profile/15826552575078655201noreply@blogger.comtag:blogger.com,1999:blog-7876560611515310173.post-89752652920894230702009-01-18T14:57:00.000-06:002009-01-18T14:57:00.000-06:00I love it when someone else types what I'm thinking so I don't have to look like the jerk.<BR/><BR/>There is nothing wrong with using Windows, you just have to use it intelligently.redDEADhttp://www.blogger.com/profile/07778199165854076395noreply@blogger.comtag:blogger.com,1999:blog-7876560611515310173.post-57199677866573774102009-01-18T12:21:00.000-06:002009-01-18T12:21:00.000-06:00Glad you liked it. ^^<BR/>.<BR/>I thought you were going to block my comment. I think I was a bit too offensive ^^<BR/>.<BR/>Windows have a lot of security flaws open now and are taking longer to be fixed by M$ each time. Some of the last have called a lot of attention on the press lately. Like this one: http://news.bbc.co.uk/1/hi/technology/7784908.stm and alot more flaws on Windows itself that M$ even deny the existence!<BR/>.<BR/>Sorry for the bad english. xP<BR/>.<BR/>[]'skblo_Brasil.SPhttp://www.blogger.com/profile/09061472047769570139noreply@blogger.com