[thelist] how to cover addressbar/toolbars of IE/Fx?

VOLKAN ÖZÇELİK volkan.ozcelik at gmail.com
Mon Dec 5 10:18:10 CST 2005


Hi Zhang,

First of all; phishing, not fishing.

I do not know whether the attack is still applicable. As far as I know
MS had done something about it but I don't remember a pointer to an
explicit reference / bug report etc.

Besides, I did not clearly understand your reason to use it.

As a side note you cannot position your temporary message pixel
perfect on the address bar no matter what.

- What if I am a toolbar crack and I have a google toolbar, a yahoo
toolbar, a web accessibility toolbar, a links toolbar, and following
an addressbar at the bottom.
(yes I do have all those toolbars but most of the time some are turned off)?

- What if I am crazy and browse my sites with my address bar turned off?

- What if I position my addressbar at the bottom of the page instead
of top (using opera for instance) ?

my humble opinion is, your technique is not a good idea to implement.

You had better think once again.

HTH,
--
Volkan Ozcelik
+>Yep! I'm blogging! : http://www.volkanozcelik.com/volkanozcelik/blog/
+> My projects/studies/trials/errors : http://www.sarmal.com/



More information about the thelist mailing list