Open Directory - Computers: Internet: E-mail: Free: Web-Based: H: Hotmail: Security

Description

Top
: Computers
: Internet
: E-mail
: Free
: Web-Based
: H
: Hotmail
: Security (25)

See also:

Computers: Software: Internet: Clients: Web: Browsers: Internet Explorer: Security (17)

Microsoft Passport to Trouble - Describes a security hole by which a hacker can gain access to a user's Passport shopping profile by stealing their Hotmail cookie.
Register: MS Passport cracked with Hotmail - Passport authenticates a user for access to his credit cards and Web site accounts and passwords, to make life easy for on-line merchants and shoppers, and hackers and identity thieves. By Thomas C. Greene. (November 05, 2001)
Wired: Stealing MS Passport's Wallet - To correct serious security flaws, Microsoft on Friday disabled the virtual wallet function of its Passport service and has begun notifying partners about the vulnerabilities, the company has confirmed. By Brian McWilliams. (November 02, 2001)
BetaNews: Hotmail Flaw Raises Questions Over XP Security - Late Sunday night, Root Core, a group of computer security experts, published information exposing vulnerabilities in Microsoft's popular service. (August 21, 2001)
Slashdot: Hotmail Hacked - This isn't the first time that the folks who are gonna give us a internet wide universal login system had a hole. News and discussion. (August 20, 2001)
BBC: Hotmail Hole Exposes E-mails - Details of how to read other people's messages have been posted on a website run by a group called Root Core and it has quickly spread to other sites and newsgroups. (August 20, 2001)
Register: Hacking Hotmail Made Easy - Some bright empiricist from Root-Core has discovered that anyone can log into their Hotmail account and then call messages from any other Hotmail account by crafting a URL with the second account's username and a valid message number. By Thomas C Greene. (August 20, 2001)
HotMail JavaScript-in-Attachment Attack - Explanation of JavaScript in HTML attachments security hole, since fixed. (October 05, 2000)
Slashdot: Another Hole in Hotmail - Article and discussion of HTML attachment attack. (May 10, 2000)
Telepolis: Turning Tides - The significance of the Hotmail crack. Article by Felix Stalder linking the problems at Hotmail with the Sun purchase of Star Division. (September 02, 1999)
Slashdot: Update: MS Says Hotmail "Security Issue" Resolved - News and discussion. (August 31, 1999)
CNN: Status of Hotmail privacy unclear - Microsoft's Web-based e-mail service suffered a damaging blow to its integrity Monday when a security breach came to light that made it so anyone's Hotmail messages could be read. By Robin Lloyd. (August 30, 1999)
Slashdot: Hotmail Cracked Badly - Brief description of issue. (August 30, 1999)
Wired: Did MS Dig Its Hotmail Hole? - The Hotmail security hole may have been an intentional backdoor that Microsoft built into its system for maintenance purposes, security experts said. By James Glave. (August 30, 1999)
Wired: Hotmail Accounts Exposed to All - No sooner was one catastrophic security flaw closed Monday -- one that exposed millions of Hotmail accounts to prying eyes -- when another one appeared. By Declan McCullagh and Ja. (August 30, 1999)
Wired: Hotmail Hackers: 'We Did It' - A previously unknown group known as Hackers Unite has claimed responsibility for publicizing Hotmail's security breach, which Microsoft vehemently denied was the result of a backdoor oversight. By James Glave. (August 30, 1999)
Wired: Hotel Hotmail - As outages and service problems continue to plague Microsoft's free email service Hotmail, users who try to cancel their accounts may be in for a surprise: They can't. By Polly Sprenger. (March 22, 1999)
CNet: Cookies cap Hotmail security hole - Hotmail said it will mandate the use of cookies to plug a newly discovered security hole. (March 19, 1999)
Wired: Hotmail Bug, Still an Open Book? - Security updates made last month to Microsoft's free email service, Hotmail, may have failed to fix the problem. Not only that, but privacy watchdogs fear that the fix might actually help the company analyze their users' Web browsing habits. By Michael Stutz. (September 21, 1998)
CNET News.com: New security glitch for Hotmail - Security-minded programmers are finding holes in Microsoft's Hotmail faster than the free Web-based email service can plug them. (August 31, 1998)
CNET News.com: Hotmail plugs security hole - Microsoft's Hotmail today claimed victory over the security holes that have put the free email firm on the hot seat this week. (August 27, 1998)
Wired: Microsoft Rights Hotmail - Microsoft has fixed a serious vulnerability in its Hotmail email program that tricks users into sending their usernames and passwords to an outside email address. By Michael Stutz. (August 27, 1998)
Wired: Hotmail Open to Script Attacks - Tom Cervenka, a Web programmer at Canadian Specialty Installations, spent last week working on some clever coding to send to his Hotmail account. It tells users account access has been timed out and that they need to re-enter their account and password information. By Michael Stutz. (August 24, 1998)
CNET News.com: Hotmail bug fix not a cure-all - Microsoft's free Web-based email service Hotmail last night implemented a partial fix for a JavaScript security problem. (August 01, 1998)
Wired: Hotmail Has a Hole - and a Fix - A Danish government official has reported a security hole that could allow unauthorized access to private accounts on Hotmail, the free Web email service. The company confirmed the hole exists and said Friday it would patch it within a day. By Michael Stutz. (February 20, 1998)

"Security" search on: AOL - Ask - Bing - Gigablast - Google - Lycos - Yahoo - Yippy

Category editor: lavendergreen

Visit our sister sites mozilla.org | MusicMoz | Wikipedia

Last update: Saturday, December 20, 2008 9:15:08 AM EST - edit

Description

Top
: Computers
: Software
: Internet
: Clients
: Web
: Browsers
: Internet Explorer
: Security (17)

Open Directory - Computers: Software: Internet: Clients: Web: Browsers: Internet Explorer: Security

See also:

Microsoft Internet Explorer 4.x 5.x - Frame Loop Vulnerability - Advisory by USSR: "It is possible to create a malicious webpage that when visited by an IE user all of their system resources are devoured and depending on the system its possible that the machine can even crash and reboot itself."
Microsoft: Q167614 - Update Available For "Frame Spoof" Security Issue - An update that addresses a potential security issue with regard to the use of frames in Internet Explorer.
Privacy Secrets of MicroSoft's Internet Explorer - Security and internet privacy issues of Global Histories, Cookies, and Cache while browsing with Mac Explorer 5.0
Windows Security Guide: Internet Explorer - Descriptions, and patch information, for vulnerabilities affecting various versions of this browser.
Security Fix: Internet Explorer Unsafe for 284 Days in 2006 - Brian Krebs explains the methodology behind the statistics that resulted in this headline. (January 04, 2007)
GreyMagic Security: Appendix to "IE allows universal Cross Site Scripting" - Explains how the "ANALYZE.DLG" resource can be manipulated to allow the execution of arbitrary code in the My Computer" zone. (April 16, 2002)
The Register: MS Security Patch Fails on Local Files - The MS patch intended to fix a data binding flaw in IE, which enables a script to call executables on your Windows machine using the object tag, does not protect against malicious files launched from a local directory. (April 02, 2002)
The Register: Cumulative IE Patch for Maicious Cookies - A fairly serious flaw in Internet Explorer which would enable a malicious Web page or e-mail to drop a cookie containing an HTML script on a victim's machine and run it in the 'Local Computer' zone rather than the Internet zone to avoid restrictions has just been patched. (April 01, 2002)
Retrieving Information on Local Files in IE - Explains how the IMG element's dynsrc attribute can be exploited to test the existence of, find the size of, find the date last updated/modified of, and the creation date of, an arbitrary local file. By GreyMagic Security. (March 27, 2002)
The Register: IE, Outlook Run Malicious Commands Without Scripting - An attacker can run arbitrary commands on Windows machines with a simple bit of HTML, an Israeli security researcher has demonstrated. The exploit will work with IE, Outlook and Outlook Express even if active scripting and ActiveX are disabled in the browser security settings. (March 04, 2002)
Executing Arbitrary Commands Without Active Scripting or ActiveX - Advisory by GreyMagic Security explains how a vulnerability in elements can be exploited with data binding. (February 27, 2002)
CERT Advisory: Buffer Overflow in Microsoft Internet Explorer - Provides an overview and solutions to this vulnerability which, theoretically, affects all applications utilizing the Internet Explorer HTML rendering engine. (February 25, 2002)
The Register: Three New MS Security Holes - Two Nasty - Includes: MSXML may ignore IE security zone settings during a request for data from a Web site; and a VBscript problem which allows an attacker to read files on a victim's local drive, or eavesdrop on his browsing session. (February 22, 2002)
Wired News: IE Bug Can Lead to Strange Search - Describes a security hole which can be exploited to change users' search sites or to serve up offensive ads. (November 07, 2001)
Wired News: IE Hole-Finder in Odd Position - A hacker who discovered a potentially devastating security hole in Microsoft's Internet Explorer says he has found himself in the undesired position of providing technical support to people who cannot install the patch that Microsoft released to fix the flaw. (April 03, 2001)
Wired News: IE Hole Surrenders Your Computer - An attacker can gain control of another user's machine using an HTML-formatted e-mail with an attachment that contains a small remote-control program. The e-mail can be sent directly to the victim, or can be placed on a website. (March 30, 2001)
CNET: Buffer-overflow Bug in IE - "Microsoft is urging users of its Internet Explorer browser to download a patch for a newly discovered buffer-overflow security bug. The bug takes advantage of the way some versions of the IE browser handle long strings of JScript code." (August 19, 1998)

"Security" search on: AOL - Ask - Bing - Gigablast - Google - Lycos - Yahoo - Yippy

Volunteer to edit this category.

Visit our sister sites mozilla.org | MusicMoz | Wikipedia

Last update: Monday, October 10, 2011 10:15:06 PM EDT - edit

Help build the largest human-edited directory on the web.

Submit a Site - Open Directory Project - Become an Editor

About Serebella.com