| 
          
         | 
        
          
            <<  
             ^ 
              >>
          
          
            
              
                Date: 1998-09-30
                 
                 
                Netscape: Bad News mal zwei
                
                 
-.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- 
                 
                
      q/depesche 98.9.30/2 
updating   98.9.11/2 
 
Netscape: Bad News mal zwei 
 
Fast zehn Prozent Marktanteile im ersten Halbjahr 98 an 
Microsoft verloren & dann sind da noch diese 30 Zeilen Java 
aufgetaucht. Sobald der Communicator entweder via WWW oder 
auch Mail (attachment) damit in Kontakt gerät, verrät er 
alle Geheimnisse des Cache. Wie oft wann welche Websites 
abgerufen wurden, Online/Registrierungen & c - eben alles, 
was man zum Erstellen von Bewegungs- und Interessensprofilen 
im Netze brauchen kann.  
 
-.-.- --.-  -.-.- --.-  -.-.- --.- 
Although still the market leader, Netscape lost nine points 
of market share in the U.S. browser market in the first half 
of 1998. Microsoft's branded product gained just under five 
points of market share in the same period. 
... 
Joan-Carol Brigham, a research manager in IDC's Internet and 
eCommerce Strategies research program: "It appears that 
Microsofts current battle with the U.S. government and 
Netscape's software giveaway have had little effect in 
keeping Netscapes market share from eroding." 
 
full text 
http://www.idg.net/
                   
 
-.-.- --.-  -.-.- --.-  -.-.- --.- 
JOHN MARKOFF 
September 28, 1998 A potentially serious security flaw has 
been discovered in the programming language used in the 
Navigator and Communicator software of the Netscape 
Communications Corp., with the defect possibly allowing an 
outsider to read information on a personal computer user's 
hard disk. 
... 
He was able to take advantage of the vulnerability by 
writing a 30-line piece of Javascript code that is able to 
capture and copy information automatically from the 
so-called cache, or temporary storage area, on a PC's hard 
disk. The captured information can reveal which Web sites a 
computer user has recently visited. 
 
The captured information could also include data that a 
computer user might have created when communicating with a 
Web site -- including personal data typed in when 
registering at a site or conducting a retail transaction. 
Credit card information, however, would not be revealed, 
because it is protected by separate security software. 
... 
Although there is no evidence that the security flaw has 
actually been exploited by someone with harmful intent, the 
gravity of the threat was noted by other computer security 
specialists. They noted that a user's vulnerability extends 
beyond visiting a hostile Web site that might exploit the 
flaw. The flaw could also be exploited through e-mail 
received using Netscape's software, they said, by sending an 
intended victim an e-mail message that would secretly force 
the user to run an illicit Javascript program. 
... 
"This is pretty scary," said Richard M. Smith, president of 
Phar Lap Software Inc., a software development company in 
Cambridge, Mass. "In some sense the cache on your computer 
tells a lot about your life." 
 
Full text 
http://www.nytimes.com
                   
http://search.nytimes.com/search/daily/bin/fastweb?getdoc+site+iib-site+54+
                   
0+wAAA+privacy 
-.-.- --.-  -.-.- --.-  -.-.- --.- 
q/depesche is powered by http://www.netsphere.at
                   
handicrafters of fine mailing-lists and more 
-.-.- --.-  -.-.- --.-  -.-.- --.-
    
                 
- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- 
                
edited by Harkank 
published on: 1998-09-30 
comments to office@quintessenz.at
                   
                  
                    subscribe Newsletter
                  
                   
                
- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- 
                
                  <<  
                   ^ 
                    >> 
                
                
               | 
             
           
         | 
         | 
        
          
         |