OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Vuln-Dev Archives: R: Re: ICQ >= 99* + CC Data

R: Re: ICQ >= 99* + CC Data

Subject: R: Re: ICQ >= 99* + CC Data
From: Raistlin (raistCTRADE.IT)
Date: Wed Jan 19 2000 - 06:32:52 CST

> I read an article about that last night. Apparently, with the feature
> turned on IE just looks at the field name in the HTML code, and throws
> up a list of choices that you've previously used for the same field
> name elsewhere.

Anyone knows if there is some kind of attribute to tell IntelliNonSense not
to do this even if enabled ?

I mean, something like
<INPUT TYPE="password" NAME="themostimportantpasswordinmylife"
INTELLISENSE="vade_retro_satana">

which tells IntelliSense to stay quiet and not to log the entry ?

In my opinion, such a thing (if applied) would make the security problem a
little easier to manage, since trusted, big, secure sites would activate
this kind of protection on all their password & credit card entries,
effectively making only useless data stay in IntelliSense database.

Obviously, the best would be if Intellisense needed to be activated, not
deactivated, as the simplest rules of security ask.

Raist

This archive was generated by hypermail 2b27 : Thu Jan 20 2000 - 01:47:24 CST