http://www.techworld.com/news/index.cfm?fuseaction=displaynews&NewsID=944

Including quite possibly one of the single most asinine tech support thing i've ever read: http://support.microsoft.com/?id=833786

I especially like how microsoft advises to manually type all your links and to check the page source for potential bad links because of those holes.

------------------
[Blue Mink Bifocals !] [fsck -Rf /world/usr/] [<!-- kalimonster -->] [Capite Terram]
"You'll have to face it, the endings are the same however you slice it. Don't be deluded by any other endings, they're all fake, with malicious intent to deceive, or just motivated by excessive optimism if not by downright sentimentality. The only authentic ending is the one provided here: John and Mary die. John and Mary die. John and Mary die." -Happy Endings [Margeret Atwood]
NPC.Interact::PressButton($'Submit');

That's not a specific IE flaw.. Any browser will do that. I just tried it in Firebird and the same thing still happened. (Although in Firebird you can select what program you want to open the file, so I guess that helps..)

And it's hardly a new thing. People have been using the same trick for some time in various ways. Renaming image files to .txt to get remote linking out of Geocites, is one example of this.

------------------
"When all else fails, eat pie."
-¬thoughts from beyond observance

Could someone explain to me how this is even newsworthy? I mean, I REALLY hate Microshaft, but this is a fairly simple trick that any idiot could probably think of. The fact that this is a 'hole' that someone thinks must be 'fixed' just proves how brainless the general public is. Meh, it doesn't matter, I'll just stick with my currsnt strategy; wait a few days, let someone else find out it's a worm, and keep an obsessively updated anti-virus.

Jin, your sig is the greatest piece of wisdom humanity has ever known. I wonder why it is not more respected. Mmmmm, pie....

------------------
Cynic (sin'ik) n. One of a sect of ancient Greek philosophers who held that virtue is the ultimate goal of life, their doctrine gradually coming to symbolize insolent self-righteousness.

Drink So-Be, and play longer!

I only read the first few lines, and I'm not a supporter of MS software, but it seems to me that all you'd have to do is not tell the file you're downloading to open. Honestly, I think if you do that you're something of an idiot anyway. It just begs for trouble. If you download a file and tell it to open, you ASK for trouble. If you download it and save to disk, the chances of trouble are, in my opinion, slimmer. You see what the file is BEFORE you open it. Then you have the choice to open or not to open.

The people who do this crap are idiots.

------------------
Frogblast the Vent Core!

--End of Line--

Just follow the simple rule of downloading only from sites you trust, and you'll be fine.

------------------
Snail racing: (500 posts per line)
-------------@%

DSettahr's Homepage

Finally! Some recognition!

------------------
"When all else fails, eat pie."
-¬thoughts from beyond observance

and yet he still hasn't updated his DA...
..oh and yes.. what stupid people

------------------
<Genki> oh, where are you going, with beards all a waggin, no knowin no knowin what bring dear Mr. Baggins, and Balin, and Dwalin, here down in the vally Ah ha!

Spoof didn't work in Opera.
So... meh.

------------------
Sell crazy someplace else, we're all stocked up here.

Me hugs opera!



------------------
If at first you don't succeed, lower your standards.

The combination of that flaw with the masked url one in the other article linked in there is a bit, um interesting. The second one doesn't work in opera either but that wasn't really the point of this thread; mostly, just the eyestabbing face-palmage of MS's tech support advice about it deerved posting..

------------------
[Blue Mink Bifocals !] [fsck -Rf /world/usr/] [<!-- kalimonster -->] [Capite Terram]
"You'll have to face it, the endings are the same however you slice it. Don't be deluded by any other endings, they're all fake, with malicious intent to deceive, or just motivated by excessive optimism if not by downright sentimentality. The only authentic ending is the one provided here: John and Mary die. John and Mary die. John and Mary die." -Happy Endings [Margeret Atwood]
NPC.Interact::PressButton($'Submit');

This is . . . umm . . . funny... Yeah, funny...

------------------
The future is here, and all bets are off.

13 1/2h from thread start to GBK entering, that may be a new slow record

------------------
[Blue Mink Bifocals !] [fsck -Rf /world/usr/] [<!-- kalimonster -->] [Capite Terram]
"You'll have to face it, the endings are the same however you slice it. Don't be deluded by any other endings, they're all fake, with malicious intent to deceive, or just motivated by excessive optimism if not by downright sentimentality. The only authentic ending is the one provided here: John and Mary die. John and Mary die. John and Mary die." -Happy Endings [Margeret Atwood]
NPC.Interact::PressButton($'Submit');

Actully, I saw the thread 30 seconds after it was posted, I just didnt respond....

------------------
The future is here, and all bets are off.

Lies....

Deciet....

Conspiracy!

... I'll go away now.

------------------
Frogblast the Vent Core!

--End of Line--