Feeds

Internet Explorer cookies leave you naked

Debugging closed-source apps sure takes time

  • alert
  • submit to reddit

Bridging the IT gap between rising business demands and ageing tools

Anyone who uses cookies for authentication or to store data like passwords could have that information exposed by Internet Explorer and intercepted by a malicious Web site, Peacefire.org reports.

Using a specially constructed URL, a third-party Web site can read Internet Explorer cookies from any domain, enabling the operator of a hostile Web site to break into a visitor's Hotmail account; visit Amazon.com impersonating that user and access their real name, e-mail address and list of 'recommended titles'; grab an MP3.com user's e-mail address, and so on, Peacefire contributors Bennett Haselton and Jamie McCarthy say.

All versions of IE for Windows are affected, but versions for Unix and Mac are not, nor is Netscape, the article says. Users of IE for Windows are urged to disable JavaScript until the world-class innovators in Redmond noodle out a proper fix.

The Peacefire site includes a demonstration which will display cookie data for other domains to which you're logged in another browser window. ®

The Power of One Brief: Top reasons to choose HP BladeSystem

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
iPad? More like iFAD: We reveal why Apple fell into IBM's arms
But never fear fanbois, you're still lapping up iPhones, Macs
Nadella: Apps must run on ALL WINDOWS – PCs, slabs and mobes
Phone egg, meet desktop chicken - your mother
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
White? Male? You work in tech? Let us guess ... Twitter? We KNEW it!
Grim diversity numbers dumped alongside Facebook earnings
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
You! Pirate! Stop pirating, or we shall admonish you politely. Repeatedly, if necessary
And we shall go about telling people you smell. No, not really
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.