[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Fooling people with Java applets



On Monday,  29 Jan 1996 Benjamin Renaud wrote

:All graphical UI elements spawed by an applet, which are the only ones
:that can get user events, are clearly marked as "untrusted applet
:window"s.

:So unless you type your password in a pop-up marked "untrusted applet
:window", you should be fine. And if you do, you arguably deserve
:whatever happens to you....

As sad as it sounds, I actually had this happen.  Some shmuck put in sensitive 
information into a window clearly maked "Untrusted Java Applet"

Unfortunatly, the smuck was a Sr. Vice President, so what can you do.
Regards,
Michael Peponis
PGP Key Avalible form MIT Key Server,or via finger