Error
  • JUser::_load: Unable to load user with id: 67

Featured Articles

IHS teardown reveals Galaxy S5 BOM

IHS teardown reveals Galaxy S5 BOM

Research firm IHS got hold of Samsung’s new flagship smartphone and took it apart to the last bolt to figure out…

More...
Galaxy S5, HTC One M8 available selling well

Galaxy S5, HTC One M8 available selling well

Samsung’s Galaxy S5 has finally gone on sale and it can be yours for €699, which is quite a lot of…

More...
Intel lists Haswell refresh parts

Intel lists Haswell refresh parts

Intel has added a load of Haswell refresh parts to its official price list and there really aren’t any surprises to…

More...
Respawn confirms Titanfall DLC for May

Respawn confirms Titanfall DLC for May

During his appearance at PAX East panel and confirmed on Twitter, Titanfall developer Respawn confirmed that the first DLC pack for…

More...
KFA2 GTX 780 Ti Hall Of Fame reviewed

KFA2 GTX 780 Ti Hall Of Fame reviewed

KFA2 gained a lot of overclocking experience with the GTX 780 Hall of Fame (HOF), which we had a chance to…

More...
Frontpage Slideshow | Copyright © 2006-2010 orks, a business unit of Nuevvo Webware Ltd.
Monday, 26 March 2007 13:36

Windows Network settings are security killer

Written by

Image

Design bug

 

A fundamental design flaw in the way that Windows obtains proxy settings makes the operating system vulnerable to attack.


Security company IOActive told the ShmooCon hacker conference that an attacker with access to a network could insert a malicious proxy and see all the traffic.


Chris Paget, director of research and development at IOActive told the converence that it was easy for a hacker to become a proxy server without a company knowing about it.


According to News.com, the problem is caused because Internet Explorer on Windows PCs by default searches for a proxy server using the Web Proxy Autodiscovery Protocol, or WPAD.


An attacker can register a proxy server on a network using the Windows Internet Naming Service, or WINS, and other network services including the Domain Name System, or DNS. the first thing IE does when IE starts up is ask the network where its proxy server is and a hacker only has to show it where to go.


Microsoft has acknowledged that there is a problem.

More here

 

Last modified on Monday, 26 March 2007 18:23

E-mail: This e-mail address is being protected from spambots. You need JavaScript enabled to view it
blog comments powered by Disqus

To be able to post comments please log-in with Disqus

 

Facebook activity

Latest Commented Articles

Recent Comments