FROM: Bob Marchessault, Georgian College
Barrie, Ontario, Canada

TO: Members of the WWWDEV Distance Learning ListServer
About 700+ Worldwide including Bob Richardson, Pompano Beach, Florida

"Web Sites Using Frames Vulnerable to New Spoofing Attack"
from: Bob Marchessault

This very serious problem affects even the biggest and best known Web sites. A simple hack can apparently cause any Web site that uses frames to display anything the hacker chooses or cause a site to display a form which, if filled in, would send information back to the attacker. SecureXpert Labs found the problem, dubbed the "Frame Spoofing" vulnerability (FSV), and demonstrated it by hacking the New York Stock Exchange Web site. Due to the way Web browsers handle frame content, attackers who know the URL of a frame on your Web page can insert false information into that frame when it is presented to a user. Tasty Bits from the Technology Front (TBTF) offers a workaround but it's not pretty (don't use static frame names). You'll find a threaded discussion of the issue on Bugtraq. Webmasters at high profile Web sites can bet that somebody will try to use this against them."

FSV: http://www.securexpert.com/framespoof/index.html
TBTF: http://tbtf.com/archive/11-17-98.html#s02
Bugtraq: http://geek-girl.com/bugtraq/1998_4/0475.html


Bob Marchessault is a distinguished fine arts teacher at Georgian College and a very erudite and experienced HTML programmer too! By all means visit his homepage by selecting the underlined line below.

Bob Marchessault's homepage

You will enjoy many of his paintings as I did. His "Winds of Change" painting of a tornado coming your way put the "fear of God" in me as it seems that I live in "Tornado Alley." The last one only missed us by a mile or so during the summer of 1998 and was followed by hurricane "Mitch" the next month.

Good luck, Bob

michael kors black friday michael kors black friday michael kors black friday michael kors cyber monday michael kors black friday michael kors cyber monday uggs cyber monday michael kors black friday michael kors black friday uggs cyber monday uggs black friday north face black friday north face black friday north face black friday north face black friday uggs black friday uggs black friday uggs black friday uggs cyber monday uggs black friday uggs black friday michael kors black Friday michael kors black Friday uggs cyber monday uggs black friday michael kors black Friday uggs cyber monday michael kors black Friday uggs black friday uggs cyber monday north face black friday michael kors cyber Monday michael kors cyber Monday michael kors cyber Monday michael kors cyber Monday north face black friday north face cyber monday north face black friday beats by dre black friday north face cyber monday north face cyber monday michael kors cyber Monday uggs black friday north face cyber monday Babyliss black Friday kate spade cyber monday north face cyber monday deals mcm black friday kate spade cyber monday michael kors black Friday canada goose cyber monday uggs black friday uggs black friday lululemon black friday black friday jordans north face black friday uggs cyber monday uggs black friday kate spade cyber monday north face black friday north face cyber monday Ray Ban black Friday uggs cyber monday Babyliss cyber Monday michael kors cyber Monday lululemon black friday north face cyber monday lululemon black friday the north face black friday canada goose black friday michael kors black Friday beats by dre black Friday burberry cyber Monday uggs cyber monday burberry cyber Monday chanel cyber monday Babyliss black Friday michael kors cyber Monday uggs cyber monday beats by dre black Friday michael kors cyber monday coach cyber monday uggs cyber Monday north face cyber Monday coach black Friday uggs black Friday uggs black friday beats by dre cyber Monday louis vuitton black friday louis vuitton cyber monday michael kors cyber monday beats by dre cyber Monday michael kors black Friday beats by dre cyber Monday north face black Friday uggs black Friday gucci black friday gucci black friday beats by dre cyber Monday coach cyber monday moncler black friday lululemon cyber monday moncler cyber monday lululemon black friday moncler black friday Mulberry cyber monday bose cyber monday Mulberry black friday Ray Ban cyber monday tory burch cyber monday michael kors black friday michael kors black friday michael kors Black Friday michael kors black friday michael kors black friday uggs Black Friday jordan 11 legend blue jordan 11 legend blue black infrared 23 13s black infrared 13s legend blue 11s jordan 11 legend blue jordan 11 legend blue jordan 11 legend blue legend blue 11s legend blue 11s black infrared 23 13s jordan 11 legend blue legend blue 11s jordan 11 legend blue legend blue 11s legend blue 11s legend blue 11s legend blue 11s jordan 11 legend blue jordan 13 black red black infrared 23 13s jordan 11 legend blue black infrared 23 13s jordan 13 black infrared 23 black infrared 23 13s legend blue 11s jordan 13 black infrared legend blue 11s legend blue 11s legend blue 11s legend blue 11s black infrared 23 13s jordan 11 legend blue legend blue 11s jordan 11 legend blue legend blue 11s legend blue 11s legend blue 11s black infrared 13s jordan 11 legend blue