IE 7 vs Firefox 2

According to reports, Mozilla Firefox 2 and Microsoft Internet Explorer 7 (IE) are both vulnerable to a bug that steals the login-id and password of users, with the help of a fake log-in page.

The bug has been dubbed as "Reverse Cross Site Request vulnerability" (RCSR) by Robert Chapin, who first discovered the flaw.

Reportedly, the attack was first carried out from a profile page using a specially crafted HTML that hides the genuine MySpace content from the page, and displays the fake login page instead. The fake page is then sent to another Web site, along with information regarding MySpace users who visited the page using Firefox.

The attacks seen on My Space.com are likely to move on to Firefox as well because the Firefox Password Manager automatically enters any savedpasswords and user-id/s into the form, whereas IE is not capable of filling in the saved information automatically.

Therefore, Firefox is more likely to get affected by the flaw, as compared to IE.

According to Chapin, users of both Firefox and IE need to be aware that their information can be stolen in this way when visiting blog and forum Web sites at trusted addresses as well. Further, an RCSR attack is more likely to succeed than an XSS attack because neither IE nor Firefox are designed to check the destination of form data before the user submits them.

Moreover, the browser doesn't indicate the exploitation as it is conducted on a trusted Web site.

As of now, no fix has been issued by Mozilla, and it's not very clear if the other versions of Firefox are also affected by the flaw. Users have been advised to disable the "Remember passwords for sites" from the preference link in Firefox.

Additionally, these attacks could also be highly effective against firewall of local network servers and HTTPS addresses that are not otherwise accessible because the attacker does not need direct access.

Microsoft : War against phising !!

Microsoft is ramping up its fight against phishing, not just by continuing to improve Internet Explorer's phishing filter, but also by taking phishers to court. Announced today, the company is filing 129 lawsuits in the name of anti-phishing across Europe and the Middle East. According to a BetaNews report, Microsoft can file these suits because the phishers are damaging the company's image.

Because many of the defendants in the suits are young people as in teenagers, Microsoft is willing to accept settlements for the likes of 1,000 to 2,000 euros. Nevertheless, a recent criminal suit that dealt with phishing sent a Turkish man to prison for two and a half years. Other criminal suits were filed in Germany and France while most of the civil suits were filed in Britain.

The first lawsuit against a phisher was filed by the Federal Trade Commission in January of '04 against a 17-year old Californian teen that used a webpage resembling America Online to steal credit card numbers. The teen's punishment was a lifetime ban from sending spam and a US$3,500 fine.

Windows VISTA beta 2 - An exciting beta you can use !!

Micorsoft for a change has opened its Windows vista beta 2 to all users, and they even provide you with trial product key.Ok lets forget it all and come down to business, I installed vista ultimate edition last week and seriously didnt find anything discerning.

The beta is as smooth as any normal version, cool features wonderful new concepts.And it really looks like one for the future. The Collaboration tool and also IE and support for both 32 bit and 64 bit applications, and ability to run IE in both 32bit and 64 bit mode are real cool. The inbuilt phising filter,antispyware and Firewall have beefed up heavily.The security features have improved vastly.And cooler vista doesnt allow any software to run in admin mode without ur permission...so virtually denying spywares any control at all.

I got nVidia drivers for vista (yes most hw manufacturers already provide vista beta drivers).Even if vista installs ur driver I recommend you to download from hw manufacturer.Most XP drivers will do for Vista as well. Diagonistic tool in system menu recommends ur hw changes and driver updates and also suggests reasons why your PC is slower.

My recommendation for Vista (minimal)

Any P 4 or AMD XP or AMD 64

atleast 512 MB RAM(if you have a good ie 128MB or above graphics card)

(or)

1GB RAM

128MB or above graphics card(aero compatible)

--------------------------