~BD~ wrote:
> Mike Easter wrote:
>> ~BD~ wrote:
>>> I am 99.9% certain that when I was linked directly to the Annexcafe
>>> server *someone*, *somehow*, sent something down the line which put my
>>> machine out of action.
I'm trimming below and rearranging the dialogue so as to emphasize what
I think you are replying to. If you bottom post without context, it is
as bad as the person who top posts without context.
>> The mechanism by which you could acquire something in a newsgroup in
>> which you were rendering html insecurely and executing executables with
>> a vulnerable operating system would be for the adversary to upload
>> something and for you to download it and execute it - or else provide a
>> link for you to 'go get' the malware.
> Maybe you have hit the nail on the head, Mike!
Does that mean that when you were participating in annexcafe that you
were rendering html with your news agent and browser integration in OE
and IE and WinXP configured insecurely and you believe that you
experienced some kind of 'infection' during that insecure html news
message rendering?
>> If the would-be victim-reader isn't behaving like that; rendering
>> html insecurely or going off to malicious sites by accident, then
>> the reader has nothing to worry about from the news server's
>> messages.
Or, were you behaving in this other manner, OE secured by its
relationship with IE being in restricted mode and/or not rendering html
but displaying in plaintext?
--
Mike Easter



Reply With Quote