RE: [Full-disclosure] Apple Safari: idn urlbar spoofing

To: "Robert Swiecki" <jagger@xxxxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>, <full-disclosure@xxxxxxxxxxxxxxxxx>
Subject: RE: [Full-disclosure] Apple Safari: idn urlbar spoofing
From: "Larry Seltzer" <Larry@xxxxxxxxxxxxxxxx>
Date: Mon, 25 Jun 2007 17:15:22 -0400
In-reply-to: <4680268F.9060502@xxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <466FC842.1070404@xxxxxxxxxxx> <4671CFDB.50707@xxxxxxxxxxx> <4680268F.9060502@xxxxxxxxxxx>
Thread-index: Ace3aSEt+Ip4DZXySiGf68BsdtKaNQABH4bg
Thread-topic: [Full-disclosure] Apple Safari: idn urlbar spoofing

>>The picture taken on my system:
>>http://alt.swiecki.net/idn.png 

It looks different on my system: http://www.larryseltzer.com/safe2.png

Safari 3.0.2 on XPSP2

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.eweek.com/cheap_hack/
Contributing Editor, PC Magazine
larryseltzer@xxxxxxxxxxxxx

Follow-Ups:
- Re: [Full-disclosure] Apple Safari: idn urlbar spoofing
  - From: Michal Zalewski

References:
- Apple Safari: cookie stealing
  - From: Robert Swiecki
- Re: [Full-disclosure] Apple Safari: urlbar/window title spoofing
  - From: Robert Swiecki
- Re: Apple Safari: idn urlbar spoofing
  - From: Robert Swiecki

Prev by Date: Re: [Full-disclosure] Apple Safari: idn urlbar spoofing
Next by Date: [ISR] :: Infobyte Security Research :: release (ISR-sqlget.pl) v1.0.0
Previous by thread: Re: Apple Safari: idn urlbar spoofing
Next by thread: Re: [Full-disclosure] Apple Safari: idn urlbar spoofing
Index(es):
- Date
- Thread