Serious security holes are increasingly rare, and increasingly being fixed
before exploits appear. They don't represent a very big threat for people
who keep their systems up-to-date and exercise a bit of common sense. In the
context of this discussion, I am doubtful in the extreme that eBay is
exploiting an unknown security hole to download software to their users'
computers.
Chris
*****************************************
Chris L Peterson
Cloudbait Observatory
http://www.cloudbait.com
----- Original Message -----
From: "Darren Garrison" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, December 02, 2008 3:26 PM
Subject: Re: [meteorite-list] eBay's Spyware and Cookies
On Tue, 2 Dec 2008 13:50:00 -0700, you wrote:
There is no mechanism on a properly configured browser for a website to
download software to your computer without your active consent.
There is not an OS or browser avaiable that does not have security holes.
Not
only that, but there are multiple other applications that can be used to
infect
your system. Some known, but the ones you have to worry about are the
ones that
aren't known yet. You have a false sense of security.
News from today:
http://www.pcpro.co.uk/news/240255/apple-recommends-security-software-for-mac-owners.html
from a week back:
http://goodgearguide.com.au/article/268492
from a month back:
http://www.net-security.org/secworld.php?id=6715
others:
http://blogs.zdnet.com/security/?p=1733
Jpegs? Not always safe.
http://www.secureworks.com/research/threats/jpegvirus/
Video? Not always safe.
http://ask-leo.com/can_i_get_a_virus_or_spyware_from_a_free_video_download.html
Just because YOU can't imagine a way to get a virus/trojan/spyware into
your
computer doesn't mean that someone else can't imagine a way to get a
virus/trojan/spyware into your computer.
______________________________________________
http://www.meteoritecentral.com
Meteorite-list mailing list
[email protected]
http://six.pairlist.net/mailman/listinfo/meteorite-list
