[Full-Disclosure] Question about the new Xupiter toolbar

xss-is-lame at hushmail.com xss-is-lame at hushmail.com
Thu Jan 30 19:45:42 GMT 2003


-----BEGIN PGP SIGNED MESSAGE-----

Maybe it uses cross-site tracing.  I hear that it's really dangerous.


XiL
xss-is-lame at hushmail.com


> Has anyone looked into this new Xupiter toolbar to see how it is being
> installed on people's computer?  In particular is it using some IE
> security hole for the install or does it just use the standard ActiveX
> drive-by download mechanism?
-----BEGIN PGP SIGNATURE-----
Version: Hush 2.2 (Java)
Note: This signature can be verified at https://www.hushtools.com/verify

wmAEARECACAFAj44P5kZHHhzcy1pcy1sYW1lQGh1c2htYWlsLmNvbQAKCRDs/5lboNFb
hr8BAJ99LC++ZhuQT7S/Y/+yVXFv+U2PqQCgglbkXYlfI4SWrDviVb+HOwK7ayk=
=fz+o
-----END PGP SIGNATURE-----




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2 

Big $$$ to be made with the HushMail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427



Full-Disclosure is hosted and sponsored by Secunia.