[4707] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Big IE hole

daemon@ATHENA.MIT.EDU (Robert Inder)
Fri Mar 7 06:40:41 1997

Date: Fri, 7 Mar 1997 09:45:25 GMT
From: Robert Inder <robert@cogsci.ed.ac.uk>
To: jay@homecom.com
CC: www-security@ns2.rutgers.edu
In-reply-to: <331F3F7C.6DF8@HomeCom.com> (message from Jay Heiser on Thu, 06
	Mar 1997 17:04:44 -0500)
Errors-To: owner-www-security@ns2.rutgers.edu


In the context of others mocking Microsoft's argument that 
the IE vulnerability could only be exploited by webmasters who created
maliscious code,  Jay Heiser writes....

    > Date: Thu, 06 Mar 1997 17:04:44 -0500
    > From: Jay Heiser <Jay@homecom.com>
    > 
    :
    :

    > Unlike viruses and human attacks, hostile applets will be
    > non-replicating entities unable to migrate away from a specific IP
    > address.  The more people who get hacked, the more likely that the
    > attack will be discovered and shut down.
    > 

Is this saying more than
 "Java is designed so that Applets won't be able to replicate, and 
  I can't see how they will be able to migrate"?



Robert.

--------------------------------------------------------------------------
Robert Inder,                             HCRC, 2, Buccleuch Place,
                                          Edinburgh EH8 9LW Scotland
http://www.cogsci.ed.ac.uk/~robert/       http://www.cogsci.ed.ac.uk/hcrc/
--------------------------------------------------------------------------
Hurry! Only four shopping years left to the Millenium.



home help back first fref pref prev next nref lref last post