[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Javascript security question

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Javascript security question
From: Eugen Leitl <eugen@xxxxxxxxx>
Date: Fri, 21 Aug 2009 12:15:28 +0200
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Fri, 21 Aug 2009 06:15:31 -0400
In-reply-to: <4A8E718F.90206@xxxxxxxxx>
References: <236316.99637.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxx> <20090821093703.GN4508@xxxxxxxxx> <4A8E718F.90206@xxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: Mutt/1.5.13 (2006-08-11)

On Fri, Aug 21, 2009 at 02:06:07PM +0400, James Brown wrote:

> Probably the javascript can steal only your internal ip-adress, not

Careful, there: http://www.google.com/search?q=javascript+exploit

> external. Then, if you machine is behind NAT it is probable secure for

NAT is not a firewall.

> you. (But you need obligatly disable the java in your browser because
> the java-applications can steal you external ip-address.

-- 
Eugen* Leitl <a href="http://leitl.org";>leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE

References:
- Javascript security question
  - From: Sadece Gercekler
- Re: Javascript security question
  - From: Eugen Leitl
- Re: Javascript security question
  - From: James Brown

Prev by Author: Re: Javascript security question
Next by Author: Re: frequent empty/closed connections
Previous by thread: Re: Javascript security question
Next by thread: Re: Javascript security question
Index(es):
- Author
- Thread