Posts

Showing posts with the label security

Internet Explorer 6, 7, or 8 exposes users data via JavaScript

Ok, ok, I know these are Google Chrome dedicated days , but how can be possible that my last post did not receive attention at all? Maybe with this title somebody will read more carefully what I wrote few days ago ... or maybe not, who knows? :?

Security Basis, and an Internet Explorer data stealer

It has been about 4 years, or more, that I know about this problem, but for some reason I did not talk about it, scared by possible reactions. In other words, I was waiting for some noise over the net, or some fix from Microsoft, but nothing is happening. Actually, Microsoft is working hard on Internet Explorer 8, but the problem I am talking about, is still present ... so, I suppose it is time to tell you how dangerous this IE "feature" could be, and how dangerous could be to forget a little detail in a form, like the autocomplete attribute. The magic autocomplete option Every browser tries to make our net life as simple as possible, and when we start inserting data in an input field, it suggests us a couple of words or, if the name of that field is unique enough, directly the most probable word, name, or number, we are going to insert. To perform this operation, we could start typing the name, or simply use the down arrow button to open the list of options, and choose, usu...