08 Feb 2005

BROWSER SECURITY ALERT!
Are you really visiting Ebay.com or paypal.com? Is your online banking safe?

A security loophole in Mozilla, Firefox, Konqueror and Opera browsers could be used to spoof the URL displayed in the address bar, SSL certificate and status bar. The vulnerability stems from a flawed IDN (International Domain Name) implementation within the browsers. Using IDN which support Unicode characters gives the scammers characters to use that resemble normal characters, so you wouldn’t be able to tell the difference.

You can check if your browser is affected using Secunia’s test.

Patches will be available soon from your browser vendor. In the mean time:
– Don’t follow links from untrusted sources (like emails).
– Manually type the URL in the address bar.

You have been warned!

Thanks JohnFen

Leave a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.