1996-01-31 - Re: Fooling people with Java applets

Header Data

From: “Michael Peponis” <mianigand@unique.outlook.net>
To: cypherpunks@toad.com
Message Hash: 40b6e6151b9dc56f64c6118e372c75e0676639de1e8b1486e6ccf5ca9c78cbd1
Message ID: <199601311630.KAA02621@unique.outlook.net>
Reply To: N/A
UTC Datetime: 1996-01-31 16:59:18 UTC
Raw Date: Thu, 1 Feb 1996 00:59:18 +0800

Raw message

From: "Michael Peponis" <mianigand@unique.outlook.net>
Date: Thu, 1 Feb 1996 00:59:18 +0800
To: cypherpunks@toad.com
Subject: Re:  Fooling people with Java applets
Message-ID: <199601311630.KAA02621@unique.outlook.net>
MIME-Version: 1.0
Content-Type: text/plain


On Monday,  29 Jan 1996 Benjamin Renaud wrote

:All graphical UI elements spawed by an applet, which are the only ones
:that can get user events, are clearly marked as "untrusted applet
:window"s.

:So unless you type your password in a pop-up marked "untrusted applet
:window", you should be fine. And if you do, you arguably deserve
:whatever happens to you....

As sad as it sounds, I actually had this happen.  Some shmuck put in sensitive 
information into a window clearly maked "Untrusted Java Applet"

Unfortunatly, the smuck was a Sr. Vice President, so what can you do.
Regards,
Michael Peponis
PGP Key Avalible form MIT Key Server,or via finger





Thread