* Vincent Lefevre ([EMAIL PROTECTED]) wrote:
> On 2005-08-13 18:51:44 -0400, Eric Dorland wrote:
> > Are you still seeing this? You're still the only one I've seen
> > report it.
> 
> Yes, I'm still seeing this. I don't know if this is related to
> my modifier settings (given by "xmodmap -pme"):
> 
> shift       Shift_L (0x32),  Shift_R (0x3e)
> lock        Caps_Lock (0x42)
> control     Control_L (0x25)
> mod1        Meta_L (0x73)
> mod2        Num_Lock (0x4d)
> mod3        Mode_switch (0x71)
> mod4      
> mod5        Scroll_Lock (0x4e)
> 
> > Right, but the point is it's not a security issue because it is
> > analogous to accidently clicking on a link. 
> 
> Then the IDN-related problem wasn't a security issue either.

Umm, no. The IDN problem was a trust issue. With the IDN issue, I
could get a DNS name and certificate for something that was rendered
as paypal.com, even though it wasn't. So that could be exploited to
have you trust a site that should not be trusted. 

Please explain how these issue could be exploited to create a
vulnerability. 

-- 
Eric Dorland <[EMAIL PROTECTED]>
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS d- s++: a-- C+++ UL+++ P++ L++ E++ W++ N+ o K- w+ 
O? M++ V-- PS+ PE Y+ PGP++ t++ 5++ X+ R tv++ b+++ DI+ D+ 
G e h! r- y+ 
------END GEEK CODE BLOCK------

Attachment: signature.asc
Description: Digital signature

Reply via email to