Archive for January 7th, 2008
Firefox Memory Leaks Know No Bounds
Monday, January 7th, 2008
I have a love-hate relationship with Firefox. I have used it in tandem with Internet Explorer since the days of the original Mozilla browser, each one having it’s own pros and cons. To be quite honest, Firefox zealots make me laugh since most of them have been around the web about as long as my kid sister, and yet seem to have the experience and wisdom of of Elmo when it comes to the “browser wars”.
I have a love-hate relationship with Firefox. I have used it in tandem with Internet Explorer since the days of the original Mozilla browser, each one having it’s own pros and cons. To be quite honest, Firefox zealots make me laugh since most of them have been around the web about as long as my kid sister, and yet seem to have the experience and wisdom of of Elmo when it comes to the “browser wars”.
AOL’s Web Site and XSS
Monday, January 7th, 2008
Today I received a phished e-mail to one of my many (many) free Yahoo! e-mail accounts that somehow cleared all of their SPAM algorithms. Interestingly enough, the link inside the message was to a legitimate AOL landing page. However, it was a redirect page that sent me to a phishing site site removed. I have run into this various times on a couple of client projects and it is just interesting (and worrisome) to see it happen so blatantly on other, high trafficked web sites. Here is the redirect link (notice I am appending my URL to the end of the query string.)
http://www.aol.com/redir.adp?url=http://www.skowronek.org
I attempted to locate the appropriate abuse contact at AOL, but unfortunately I do not have the time, nor patience to rummage through their site to locate their security advisers. So I will just have to notify another security expert as soon as I have time to actually figure out who that would be.
Today I received a phished e-mail to one of my many (many) free Yahoo! e-mail accounts that somehow cleared all of their SPAM algorithms. Interestingly enough, the link inside the message was to a legitimate AOL landing page. However, it was a redirect page that sent me to a phishing site site removed. I have run into this various times on a couple of client projects and it is just interesting (and worrisome) to see it happen so blatantly on other, high trafficked web sites. Here is the redirect link (notice I am appending my URL to the end of the query string.)
http://www.aol.com/redir.adp?url=http://www.skowronek.org
I attempted to locate the appropriate abuse contact at AOL, but unfortunately I do not have the time, nor patience to rummage through their site to locate their security advisers. So I will just have to notify another security expert as soon as I have time to actually figure out who that would be.