cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1996-01-30 - Re: Java Sniffer (Was: Re: FV Announces That The Sky Is Falling)

Header Data

From: “Richard Martin” <rmartin@aw.sgi.com>
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Message Hash: b4a0f2e7318e57b26a3fb46ce5ea57a720e18f48f13288b092a4be0837371371
Message ID: <9601300936.ZM1868@glacius.alias.com>
Reply To: <199601300412.XAA23037@opine.cs.umass.edu>
UTC Datetime: 1996-01-30 15:42:02 UTC
Raw Date: Tue, 30 Jan 1996 23:42:02 +0800

Raw message

From: "Richard Martin" <rmartin@aw.sgi.com>
Date: Tue, 30 Jan 1996 23:42:02 +0800
To: cypherpunks@toad.com (Cypherpunks Mailing List)
Subject: Re: Java Sniffer (Was: Re: FV Announces That The Sky Is Falling)
In-Reply-To: <199601300412.XAA23037@opine.cs.umass.edu>
Message-ID: <9601300936.ZM1868@glacius.alias.com>
MIME-Version: 1.0
Content-Type: text/plain



-----BEGIN PGP SIGNED MESSAGE-----

On Jan 29, 11:12pm, Futplex wrote:
> Much more likely, IMHO, than a Java sniffer is a Java Trojan horse that pops
> up an innocuous dialog box and asks you to enter some sensitive piece of
> information, then sends it off somewhere. About all it takes to write that is
> a modicum of skill in user interface design. You could write it in any
> programming language, but in Java it may be particularly effective, since
> people may come to expect to be prompted for sensitive info over the net by
> Java apps. Maybe the Java folks who just left Sun decided to seize the
> opportunity ;>
Since the Java stuff that I'm running around here either (a) is from
netscape, which jams a little line saying, "Untrusted Java Applet" at the
bottom of each window a Java applet creates or (b) is run by me, by hand,
from the command line, using either the interpreter or the appletviewer...
I don't think this is much of a threat. I see much more difficulties with
javascript.

richard
- --
Richard Martin
Alias|Wavefront - Toronto Office [Co-op Software Developer, Games Team]
rmartin@aw.sgi.com/g4frodo@cdf.toronto.edu      http://www.io.org/~samwise
Trinity College UofT ChemPhysCompSci 9T7+PEY=9T8 Shad Valley Waterloo 1992

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMQ4syB1gtCYLvIJ1AQGjGAP9GpTWkaY4wtknB2C/emCJ++5ZFmm4s/DV
CPbhOhSiOIQWhDCZuhGqE3ltK1xnDqz2TqnoF8xzGRSiXTVJewsTW+fzsmq0wBJ9
GbqWiA1aWatju02zxL4QWJUBxK9LSEKnmQfWlodRIySUdIhQb35Wm8wzqqGUdm9o
FS3TXrIsbNQ=
=b64Y
-----END PGP SIGNATURE-----

Thread