[Full-disclosure] Re: [security] What A Click! [Internet Explorer]

2006-01-28 Thread Lance James
yossarian wrote: > There is an easy trick to avoid a .HTA related 'thingie' such as this > one: tell your windows to open .HTA files in notepad. It broke the > beautifull PoC I guess, had it in place as long as this particular > machine (2 years or so), it never broke anything before. Is there

Re: [Full-disclosure] Re: [security] What A Click! [Internet Explorer]

2006-01-27 Thread Stuart Dunkeld
On 27/01/06, yossarian <[EMAIL PROTECTED]> wrote: > HTA runs applications from HTML documents. Like I mentioned, never broke > anything in my experience. And yes, I sometimes develop stuff on this old > windows box, including webstuff. HTA is a MS invention, Firefox has > followed. But the main t

[Full-disclosure] Re: [security] What A Click! [Internet Explorer]

2006-01-27 Thread yossarian
HTA runs applications from HTML documents. Like I mentioned, never broke anything in my experience. And yes, I sometimes develop stuff on this old windows box, including webstuff. HTA is a MS invention, Firefox has followed. But the main thing HTA has been, and IMHO will remain, is a security

[Full-disclosure] Re: [security] What A Click! [Internet Explorer]

2006-01-26 Thread yossarian
There is an easy trick to avoid a .HTA related 'thingie' such as this one: tell your windows to open .HTA files in notepad. It broke the beautifull PoC I guess, had it in place as long as this particular machine (2 years or so), it never broke anything before. Second hint for people protectin