Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: R: Re: ICQ >= 99* + CC Data

R: Re: ICQ >= 99* + CC Data

From: Raistlin <raist_at_CTRADE.IT>
Date: Wed, 19 Jan 2000 13:32:52 +0100

> I read an article about that last night. Apparently, with the feature
> turned on IE just looks at the field name in the HTML code, and throws
> up a list of choices that you've previously used for the same field
> name elsewhere.

Anyone knows if there is some kind of attribute to tell IntelliNonSense not
to do this even if enabled ?

I mean, something like
<INPUT TYPE="password" NAME="themostimportantpasswordinmylife"
INTELLISENSE="vade_retro_satana">

which tells IntelliSense to stay quiet and not to log the entry ?

In my opinion, such a thing (if applied) would make the security problem a
little easier to manage, since trusted, big, secure sites would activate
this kind of protection on all their password & credit card entries,
effectively making only useless data stay in IntelliSense database.

Obviously, the best would be if Intellisense needed to be activated, not
deactivated, as the simplest rules of security ask.

Raist
Received on Jan 20 2000

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos