Posted 07/01/08 at 03:08:34 PM by Mark Edward Soper

According to Kapersky Labs analyst Roel Schouwenberg, GIF files can include embedded JavaScript, and under certain circumstances, can be used to launch a cross-site-scripting (XSS) attack. Internet Explorer's vulnerable to this threat, and at least one web site's already been affected.
To find out how long Redmond's known about this problem, and how another browser vendor set Microsoft an example in how to deal with a reported vulnerability, join us after the jump.
Posted 04/14/08 at 10:33:29 PM by Mark 'Marcus_Soperus' Soper
While Windows Vista often takes a beating 'round these parts for problems with speed and compatibility with older software, its improved security features are helping make video playback and web browsing more secure. Find out how.
Posted 03/26/08 at 10:36:00 PM by Mark Soper
Find out who's king of the browser rendering sweepstakes, and which browser-come-lately has an "impossible" end-user license agreement - not to mention a couple of serious security flaws.
Posted 01/30/08 at 04:23:52 PM by MarkSoper
Find out why your favorite Firefox add-ons can leave your system crying "Don't Chrome Me, Bro!" - and how to protect yourself.
Posted 01/22/08 at 09:25:52 PM by Mark Soper
You know that Microsoft never sends out email messages with links to Microsoft Update or Windows Update. Do your friends, family and co-workers know that? If they don't - be prepared to mop up the mess.
Posted 09/24/07 at 11:32:52 PM by Mark Soper
Googling your way around the Internet? Watch out - cross site scripting (XSS) makes Google and other sites less safe than you think.





