Page 1 of 2

not april 1

Posted: Mon Sep 27, 2004 9:49 pm
by blueznl
it's not april 1 is it?

http://www.microsoft.com/technet/securi ... 4-028.mspx

you gotta' be kiddin'!

Re: not april 1

Posted: Mon Sep 27, 2004 9:54 pm
by PB
> you gotta' be kiddin'!

Hehehe, just another reason I use Firefox (which is immune) instead of IE.
Pretty amazing that a web page with a JPEG could take down your system.
More about it here: http://tinyurl.com/48rdw

Posted: Mon Sep 27, 2004 11:34 pm
by GeoTrail
Doesn't matter if you use Firefox.
When you have downloaded a jpg file into the Firefox tmp folder and if a program or Explorer (or your email program) accesses the image file, the code in the EXIF could be executed.

Posted: Tue Sep 28, 2004 12:06 am
by Wolf
We don't need more IE or other browsers.

Now Google is working for create the new power browser.

Yes, and now google want create the best browser.

Google registered gbrowser.com domain and use some the best microsoft IE programers for programing.

Just wait for google browser :wink:

Posted: Tue Sep 28, 2004 9:48 am
by blueznl
well, google is just as evil as the rest...

- how about rank manipulation?

- or even outright filtering of specific sites? (google in china)

imagine there is a google sponsored browser... what would(nt) it show?

re. firefox and other programs: any program that uses the gdi+ (?) is suspectible...

the worry is just: where will it end?

Posted: Tue Sep 28, 2004 11:22 am
by The_Pharao
blueznl wrote: the worry is just: where will it end?
you will end up using a save operating system like *struckbylightening*

:wink:

Posted: Tue Sep 28, 2004 11:27 am
by Dare2
blueznl wrote:the worry is just: where will it end?
It wont. :)

Posted: Tue Sep 28, 2004 12:00 pm
by PB
> When you have downloaded a jpg file into the Firefox tmp folder and if a
> program or Explorer (or your email program) accesses the image file, the
> code in the EXIF could be executed.

Yes, but "if" is the key word here. At least Firefox is safe to browse with, but
IE is always at risk with such images (unless a patch is released for it).

Posted: Tue Sep 28, 2004 12:22 pm
by Num3
BTW, FireFox 1.0PR is out!

Posted: Tue Sep 28, 2004 1:02 pm
by GeoTrail
PB wrote:> When you have downloaded a jpg file into the Firefox tmp folder and if a
> program or Explorer (or your email program) accesses the image file, the
> code in the EXIF could be executed.

Yes, but "if" is the key word here. At least Firefox is safe to browse with, but
IE is always at risk with such images (unless a patch is released for it).
Well there is a security update release. Check here. And XP SP2 users aren't affected.

Posted: Tue Sep 28, 2004 1:55 pm
by thefool
Wolf wrote: Now Google is working for create the new power browser.

Yes, and now google want create the best browser.

Google registered gbrowser.com domain and use some the best microsoft IE programers for programing.
hmm. That google uses microsoft ie programmers, are you sure that is good?
Google is a good search engine yeah, but i would not even think about using
gmail.

And i guess the browser will have rank manipulating and be sponsored.

So, google is not better than anyone else. The only one who has not let us down is firefox/mozilla, cause its free, ad free, stable, fast, reliable(not sending secret things)!

Posted: Tue Sep 28, 2004 2:25 pm
by GeoTrail
thefool wrote:...stable...
Well, I have other excperiences.
I do use Firefox now as my no 1 browser.
But it handles js like my dad handles computers.
And he don't even know how to turn a computer ON.

Anyways, in version 1.0PR there is a major bug when using js for validation in form fields. Just so that is noted. And yes, I have notified Mozilla with their bug app ;)

Posted: Tue Sep 28, 2004 4:34 pm
by blueznl
little practical improvement in the new firefox compared with previous one, i'll wait a little more :-)

still, too many sites only work on ie by design, grrrr, so i still can't get rid of ie...

oh, by the way, sp2 means xp itself is safe, but any other application that brought it's own (copy of) the gdi+ stuff can still be affected, unless you apply the ms patch

Posted: Tue Sep 28, 2004 5:13 pm
by The_Pharao
there's a nice picture that crashes IE... yes, full patched and with sp2. don't believe? better you do, but i won't post it anyway.

Posted: Tue Sep 28, 2004 5:37 pm
by thefool
@geotrail:

what do you think PR is for?

ok i havent had problems with js.
And flash and java applets are running just fine.

Good you noticed mozilla, so they can correct the error to the final of 1.0.


But still, i havent had any crashes etc. I have had with ie. On many machines..
So i just imagine how stable the final 1.0 is :)