Not everything is necessarily the browser's fault.  This could be, for example, 
other malware.  (I'm not saying that it is, just suggesting that it may be 
environment-based.)

That said, it's hard to figure out where a security problem is if the only 
thing that can be seen is what's been left behind, and not when.  Did you look 
at the last-modification date on your bookmarks file?  Are you the only person 
with access to your computer?

-Kyle H

On Fri, Feb 25, 2011 at 8:40 PM, Gus Richter <gusrich...@netscape.net> wrote:

Background:
I had a link to my log-in page at AOL Mail on my Bookmarks Toolbar. This is
a Netscape.net mail account which I have kept for sentimental reasons. See
my return address.

I clicked on the AOL log-in link an hour ago and was surprised that instead
of taking me to the log-in page at AOL, the link in the Bookmarks Toolbar
changed its icon and actually changed the link to the Mail.com log-in page
and sent me there. Of course I don't have an account with them and could not
sign in. On the same page it asks to sign up with Mail.com:
  <http://www.mail.com/int/?ls=nvd#.1258-bluestripe-login1-undef>

I went to AOL directly and find that AOL still has the AOL AIM Mail log-in
page and my account is still in effect. I added the AOL log-in link and
deleted the Mail.com link. All seems to be back to normal.


The question I have is this:
1. This is MY Bookmarks Toolbar and includes links of MY choosing. How is it
possible that one of my links can be changed by some outside source?
2. If it is as easy as it seems, then could a destructive change (read
security problem) also be possible?

--
Gus


_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security


_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to