[G3]-TechNews : Home| RSS | Atom | MSN | WAP

Article: Step-by-Step Guide: How to set up a VPN
Article: Download: Microsoft Monad (Beta)
Article: Building a 64-Bit Multimedia Workstation
Article: Coming Soon to Windows: The Microsoft Shell (MSH)
Article: How to Reset Win NT / 2000 / XP Administrator Password
Article: The Technology Behind Dual Core CPUs
Article: How-To: Wireless Network Security
Article: Article: PCI Express - technology backgrounder
Article: Tutorial: Access Hidden Files on Your iPod
Article: Troubleshooting drivers with XP's hidden Driver Verifier Manager
Article: How to Make a 5 in 1 Network Cable
Article: Comparison - Blu-ray & HD DVD
Article: Beginners Guides Linux : Part 1 | Part 2 | Part 3
Article: How To Crack WEP (Wired Equivalent Privacy)
Article: Email Addresses Spoofing.
Link: Free PHP ebook
Link: FREE ASP.NET books and eLearning course
Link: Free registration code for Opera 8.
Invitations: Gazzag (Here) | Yahoo! 360 (Here)  | Orkut (Here)

Firefox, Mozilla To Turn Off IDN
Contributed by: G3nu1n3, at 2/17/2005 12:51:00 AM.

The next versions of Firefox and Mozilla will disable IDN support as a short-term answer to a spoofing vulnerability, the development team at open-source Mozilla Foundation said Tuesday.

The flaw, first disclosed last week, affects nearly every browser except Internet Explorer because of a flaw in handling International Domain Names (IDN). Hackers can register domain names with certain international characters that resemble other commonly used characters to spoof the address and trick the user into thinking he's at a legitimate site and/or it's secured by SSL. (IE isn't vulnerable because unlike most browsers, it doesn't support IDN by default; instead it requires a third-party plug-in to display international characters in the address bar.)

"This is a registrar/registry problem," wrote Mozilla developer Gervase Markham on his blog. "These issues were known when IDN was proposed, and the DNS registration organizations need to step up and implement them."

As a short-term solution, Firefox 1.0.1, Mozilla 1.7.6, and Mozilla 1.8 beta will have IDN disabled. All three are scheduled to release in the next week or two, said Markham.

"This is obviously an unsatisfactory solution in the long term and it is hoped that a better fix can be developed in time for Firefox 1.1," said Mozilla in a separate statement.

To Read MOST UPDATED News Items browse to HOME page.


Post a Comment

<< Home

[G3]-TechNews : Home| RSS | Atom | MSN | WAP

Archives :

- Monthly Archives :

- Post Count: 1,783 before June 1, 2005. (Since: October 26, 2004)