Error
  • JUser::_load: Unable to load user with id: 67

Featured Articles

Hands on: Nvidia Shield Tablet with Android 5.0

Hands on: Nvidia Shield Tablet with Android 5.0

We broke the news of Nvidia's ambitious gaming tablet plans back in May and now the Shield tablet got a bit…

More...
Nokia N1 Android tablet ships in Q1 2015

Nokia N1 Android tablet ships in Q1 2015

Nokia has announced its first Android tablet and when we say Nokia, we don’t mean Microsoft. The Nokia N1 was designed…

More...
Marvell launches octa-core 64-bit PXA1936

Marvell launches octa-core 64-bit PXA1936

Marvell is better known for its storage controllers, but the company doesn’t want to give up on the smartphone and…

More...
TSMC 16nm FinFET Plus in risk production

TSMC 16nm FinFET Plus in risk production

TSMC’s next generation 16nm process has reached an important milestone – 16nm FinFET Plus (16FF+) is now in risk production.

More...
Nvidia GTX 970 SLI tested

Nvidia GTX 970 SLI tested

Nvidia recently released two new graphics cards based on its latest Maxwell GPU architecture, with exceptional performance-per-watt. The Geforce GTX 970…

More...
Frontpage Slideshow | Copyright © 2006-2010 orks, a business unit of Nuevvo Webware Ltd.
Monday, 26 March 2007 13:36

Windows Network settings are security killer

Written by

Image

Design bug

 

A fundamental design flaw in the way that Windows obtains proxy settings makes the operating system vulnerable to attack.


Security company IOActive told the ShmooCon hacker conference that an attacker with access to a network could insert a malicious proxy and see all the traffic.


Chris Paget, director of research and development at IOActive told the converence that it was easy for a hacker to become a proxy server without a company knowing about it.


According to News.com, the problem is caused because Internet Explorer on Windows PCs by default searches for a proxy server using the Web Proxy Autodiscovery Protocol, or WPAD.


An attacker can register a proxy server on a network using the Windows Internet Naming Service, or WINS, and other network services including the Domain Name System, or DNS. the first thing IE does when IE starts up is ask the network where its proxy server is and a hacker only has to show it where to go.


Microsoft has acknowledged that there is a problem.

More here

 

Last modified on Monday, 26 March 2007 18:23

E-mail: This e-mail address is being protected from spambots. You need JavaScript enabled to view it
blog comments powered by Disqus

 

Facebook activity

Latest Commented Articles

Recent Comments