| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
New IE Spy Progie Exploits DCOM | |
|
||
| Time: 12:22 EST/17:22 GMT | News Source: The Register | Posted By: Julien Jay | ||
A group of Japanese security enthusiasts has developed a little tool called IE'en which exposes traffic between an IE user and any server he's contacting, including logins and passwords over HTTPS. What's interesting here is the ability to capture packets between the client and server by exploiting DCOM (Distributed Component Object Model), a Microsoft program interface allowing the mediation and exchange of program and data objects over a network, similar to CORBA. According to MS, it "enables software components to communicate directly over a network in a reliable, secure, and efficient manner." Well, reliable and efficient it may be, but 'secure' is clearly a bit of a stretcher. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 144 Last | Next |
The time now is
5:24:03 AM
ET.
Any comment problems? E-mail us |
| #1 By 2332 (165.247.4.91) at 7/2/2002 2:12:57 PM |
|
Wait... so, if you can log onto a computer with somebody's account, you can do bad things?
I don't understand! Morons. This could be done regardless of DCOM, and regardless of the OS. If you can get a stupid person to give me their password, or crack a poor password, I can do anything they could do. "If one knew the account name and the password of a remote machine, one can remotely control the software component on it using DCOM." This would be more accurate if it stated: "If one knew the account name and the password of a remote machine, one can DO PRETTY MUCH ANYTHING." Give me a break. |
| #2 By 135 (209.180.28.6) at 7/2/2002 2:28:27 PM |
|
I'd just convince the person to point their IE browser towards my Squid proxy, and capture all there data at that point. :-)
|
|
Write Comment
Return to News |
Displaying 1 through 25 of 144 Last | Next |
The time now is
5:24:03 AM
ET.
Any comment problems? E-mail us |
