Home page logo

bugtraq logo Bugtraq mailing list archives

Re: more Netscape 4.07 javascript security
From: peterw () CLARK NET (Peter W)
Date: Sun, 11 Oct 1998 18:12:18 -0400

On Thu, 8 Oct 1998, Max Vision wrote:

I've found that the best interim fix is to clear your cache, and then set
both disk and memory cache sizes to zero.  If you don't like this then you
have alternatives:

UNIX users should also consider running a local caching proxy server like
Squid. Then you can set the browser's cache sizes to zero with minimal
problems.  This also helps limit the amount of cache disk space needed if
you have more than one user; no longer will each person cache their own
set of Slashdot graphics. And obviously this would also help with all the
cache exploit problems that have crept up from time to time with both
Navigator and MSIE. Users already behind proxy servers (e.g. at work)
might see only a slight performance hit for going "cacheless" though the
proxy logs may show more activity from your workstation. That would be a
"job security" issue then...


Squid can be got from http://squid.nlanr.net/Squid/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]