[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Apple 2 ebay 3rd party checkout, security risk?
"John" <zzzjoki@yahoo.com> wrote in message 1179201989.388738.209720@n59g2000hsh.googlegroups.com">news:1179201989.388738.209720@n59g2000hsh.googlegroups.com...
>>
>> If you are truly paranoid about your DNS setting getting hacked then you should get off the internet NOW because you >are at a much higher risk of picking up a virus that targets eBay users by simply browsing a listing than you are by going >through a licensed eBay partner's checkout site.
>
> How could that be done? Could they embed malicious Javascript code, or
> something, into an ebay listing page?
>
>
Yup, almost all browser hacks these days are through malicious javascript that exploits some weakness in the browsers (and it's not just IE, all of the browsers have javascript bugs waiting to be exploited). The Java weakness that was recently "fixed" affected any browser using Quicktime, regardless of whether it was on Mac OS, Windows, or Linux. If you were running a browser that supported QuickTime you were vulnerable. Apple has released a patch (don't ignore that patch is available warning from your quicktime status bar icon) that closes the hole, but it just goes to show that you can't single out IE on Windows as the only thing to worry about.