Michal Zalewski
23/02/07, 02:08
On Thu, 22 Feb 2007, Florian Weimer wrote:
> This is the first time I read about the forced window title change. I
> hadn't noticed it earlier. Do you think this is a good enough security
> indicator (or indicator of origin, to be more precise)?
This is quite inadequate as far as protecting inexperienced users is
considered - but at least offers a chance for more alert ones to notice
the problem.
Bypassing it through about:blank elliminates even this opportunity, so
we're back in square one...
/mz
> This is the first time I read about the forced window title change. I
> hadn't noticed it earlier. Do you think this is a good enough security
> indicator (or indicator of origin, to be more precise)?
This is quite inadequate as far as protecting inexperienced users is
considered - but at least offers a chance for more alert ones to notice
the problem.
Bypassing it through about:blank elliminates even this opportunity, so
we're back in square one...
/mz