cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1996-01-30 - Re: Java Sniffer (Was: Re: FV Announces That The Sky Is Falling)

Header Data

From: Mike Fletcher <fletch@ain.bls.com>
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Message Hash: 04313e5f474267946fda852974b65821ec0e3aacfd81189c29d8111311fd7075
Message ID: <9601301504.AA28584@outland>
Reply To: <199601300412.XAA23037@opine.cs.umass.edu>
UTC Datetime: 1996-01-30 16:49:47 UTC
Raw Date: Wed, 31 Jan 1996 00:49:47 +0800

Raw message

From: Mike Fletcher <fletch@ain.bls.com>
Date: Wed, 31 Jan 1996 00:49:47 +0800
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Subject: Re: Java Sniffer (Was: Re: FV Announces That The Sky Is Falling)
In-Reply-To: <199601300412.XAA23037@opine.cs.umass.edu>
Message-ID: <9601301504.AA28584@outland>
MIME-Version: 1.0
Content-Type: text/plain



> Much more likely, IMHO, than a Java sniffer is a Java Trojan horse that pops 
> up an innocuous dialog box and asks you to enter some sensitive piece of
> information, then sends it off somewhere. About all it takes to write that is
> a modicum of skill in user interface design. You could write it in any 
> programming language, but in Java it may be particularly effective, since 
> people may come to expect to be prompted for sensitive info over the net by 
> Java apps. Maybe the Java folks who just left Sun decided to seize the
> opportunity ;>

	But both Sun's and Netscape's implementations make Frame (new
toplevel) windows have "Untrusted Applet Window" sprawled across the
bottom of them.

	On a (kinda) related note someone from Sun posted to c.l.java
that they're going to be releasing a signing mechanism for applets 
soon.  You'll be able to verify that the code comes from where it
says it does so at least when it steals your CC# you'll know whom to
go hunt down.

---
Fletch                                                     __`'/|
fletch@ain.bls.com  "Lisa, in this house we obey the       \ o.O'    ______
404 713-0414(w)      Laws of Thermodynamics!" H. Simpson   =(___)= -| Ack. |
404 315-7264(h) PGP Print: 8D8736A8FC59B2E6 8E675B341E378E43  U      ------

Thread