[4300] in WWW Security List Archive
Re: ActiveX Bank-Quicken Exploit
daemon@ATHENA.MIT.EDU (Phillip M Hallam-Baker)
Sun Feb 9 00:22:30 1997
From: "Phillip M Hallam-Baker" <hallam@ai.mit.edu>
To: "David Kennedy" <76702.3557@compuserve.com>,
"WWW Security List" <WWW-SECURITY@ns2.rutgers.edu>
Date: Sat, 8 Feb 1997 21:15:15 -0500
Errors-To: owner-www-security@ns2.rutgers.edu
When I lived in Hamburg the local solution to the Chaos Computer
Club was to pay a visit to a certain bar with five or six heavy lads...
Times have changed...
Its not the vector that is the disaster here - its Quicken. Any program
run on the machine could be used for fraud.
Phill
