In some mail from Ryan Russell, sie said:
[...]
> The attack would have to be subtle (i.e. not crash the browser) and the
> site would have to be popular, but not very carefully watched by the
> administrators.  In fact, given a powerful enough hole, this is a good way
> to build an army of traditional zombies.  Or steal loads of personal info
> off of clients.

What about placement (or addition) of an ActiveX control (which downloads
into IE on the quiet) that's not quite so benign ?

Darren

Reply via email to