Toon Hacking/Account Stealing/Keylogging Consolidated Thread

[quasigenx]

Originally Posted by feldon30

The fundamental design of Internet Explorer is flawed. It starts by granting incredible amounts of permission, and then Microsoft keeps patching holes like fingers in a dam. A year ago, it was discovered that BMP files could contain executable code which a DLL within Windows can be triggered to execute. I mean how ridiculous is this that a graphic file would be fed through some code that would allow it to EXECUTE?=

You may not remember this, but Firefox had the same BMP vulnerability. It was due to the image rendering API that both browsers used.

[quasigenx]

I would recommend people install the NoScript extension for Firefox, as well. It will stop Javascript from executing from any site that you don't explicitly whitelist. That way, even ads served from sites you trust via other domains can't run their scripts.

[quasigenx]

Also, now would be a good time to change your EQ2 passwords ;)

[Gtwo]

Originally Posted by quasigenx

Also, now would be a good time to change your EQ2 passwords ;)

If theres a key logger on ur pc im sure they would love nothing more.

[Camryn]

Originally Posted by quasigenx

Also, now would be a good time to change your EQ2 passwords ;)

You mean now is a good time to scan your comp with an anti-virus, and SpyBot, and THEN change your password. LOL

[Oswaldor]

Originally Posted by Pinski

Yah, because then they'd have to make it certain that they have the right crack for it to work out, and everything else. Hrm, seems a lot harder than just cracking your computer right off! Not to mention, the likely hood of somebody doing it, yah. Oh did you also read how they're opening it up so that security companies can make Security Protection software for it? Oh, what's that, even more secure? HOT DAMN!!!!!!

You said;

You wanna know how to keep yourself secure? Browse in a VM!

It is the same as saying; use Firefox instead of IE, since the number of real attacks against firefox are fewer. It is fundamentally wrong to make assumptions like that no matter the cause. Using a VM will make it harder for exploits to hit the host - but what about the VM? Unless you don't save state from session to session you are just as screwed. You might isolate your applications so you browse in one VM and play in another; but if you can do that your level of expertise is probably high enough to secure your host properly. VM is not the solution for end-users.

And you can't make programs immune to keylogging technology. You want to know why? You fucking pipe the keyboard output to the log-file, wtf is a game going to do to prevent that from happening? ABSOLUTELY NOTHING. The only way to prevent keyloggers from working is to make the redo the entire OS/keyboard communication and make it entirely encrypted. GL with that.

So let's speak about the XP-Vista platforms. You don't pipe anything here. But what you can do is insert a filter driver in the input chain (ensuring that it is placed on top) and read input directly from that - encrypted or otherwise. This will ensure that you decide what input the application should get.
This will fix many of the bot programs and their usage of keybd_event message system.
It will also ensure that keyloggers will not get the input since you stop it in your filter driver at a higher level than the logger. The only way to circumvent this is by placing a filter driver higher up the chain than the one you have placed and this can checked for and disabled.
You can place emulating hardware, but you are raising the bar up for how sophisticated the attacks have to be - perhaps even as high as breaking out of a VM.

[feldon30]

Originally Posted by Oswaldor

https://addons.mozilla.org/en-US/firefox/ ?? That is a website and it will ask you to install software, which Firefox will do.

There is a prompt and a mechanism to install PLUGINS. Not code that can read/write to the entire system. ActiveX, by default, runs with ridiculous permissions. If you think that 99% of internet users aren't running the default, then you are a fucking moron. IE7 goes a long way, but it is still built on the same permissive idea.

Originally Posted by Oswaldor

I am sure the Microsoft devs are shuddering in their panties because of your in-depth analysis.

The security holes in IE and retards not patching their systems is the issue. You don't have the knowledge nor the brains to actually comment on the security level of IE, so stop it.

IE has fundamental design flaws in how its security works. Anyone who disagrees is a fucking moron. That would be you.

The fact that you have to PATCH PATCH PATCH to keep IE from executing third party code tells me that it has inherent problems. Firefox does not arbitrarily execute 3rd party code. XSS is between websites, not fucking up your PC.

Originally Posted by Oswaldor

Try doing this search:

BMP vulnerability - Google Search

What do you see? Well one of the links is this: S-212: Mozilla Vulnerability in BMP Decoder

OMG - Firefox has a BMP issue (as do a multitude of other applications).

That is not code execution. It is an extremely limited javascript flaw which does not reveal any sensitive information. So please shut the fuck up. IE's BMP flaw a while back let a website OWN your computer. That is the nature of most IE flaws, they grant complete access of your computer to a website. That's not something that you can patch your way out of. That's something that has to be designed properly to never happen.

Originally Posted by Oswaldor

If the world were ActiveX free, you can pretty much go back to DOS. What you don't realise is that ActiveX or OLE or COM is a base technology in Windows. It is confusing due to the misnaming, but ActiveX is just a fancy word for OLE. Without OLE there would be no EQ2. Problem solved.

You really are a retard.

Originally Posted by Oswaldor

You pollute these threads with your stupid ramblings and just add FUD in the discussions. Your display of stupidity is quite astounding for those with just a simple clue, but for the folks who don't care to know the workings of IT systems, you just cause misinformation and insecurity.

I haven't been impressed or enlightened by anything you've posted. My computer certainly isn't more secure because of it. If there is nothing wrong with IE and Windows, why is Vista such a fundamental rewrite?

[feldon30]

Originally Posted by quasigenx

You may not remember this, but Firefox had the same BMP vulnerability. It was due to the image rendering API that both browsers used.

Originally Posted by How it affected IE

Successful exploitation can be leveraged to gain complete control over target systems, and may lead to malware installation, exposure of confidential information, or further network compromise.

Originally Posted by How it affected Firefox

A remote user can view portions of kernel memory. The risk is LOW. Could reveal small chunks of uninitialized memory

Tell me those are the same thing and I will tell you how much of a fucktard you are.

[Oswaldor]

Originally Posted by feldon30

There is a prompt and a mechanism to install PLUGINS. Not code that can read/write to the entire system. ActiveX, by default, runs with ridiculous permissions. If you think that 99% of internet users aren't running the default, then you are a fucking moron. IE7 goes a long way, but it is still built on the same permissive idea.

Funny. Must be your system, since on mine with IE5+ ActiveX controls have no permission to go anywhere unless I give it to them. Incidently the same thing as with a Java applet. Now I am sure you mingle up your understanding, but the permission system is not the same as the security holes.

IE has fundamental design flaws in how its security works. Anyone who disagrees is a fucking moron. That would be you.

Well then we are all truly fucked, since the mozilla based browser's fundamental security design is much the same as the IE ones, though their initially implementation was better than the one IE had.

The fact that you have to PATCH PATCH PATCH to keep IE from executing third party code tells me that it has inherent problems. Firefox does not arbitrarily execute 3rd party code. XSS is between websites, not fucking up your PC.

And you don't have to patch FF or any other browsers?
Do me a favor and count the patches of FF and IE over the last two years. You might be surprised at the results. Also any of those 'Memory corruption' exploits in FF can lead to executing of 3rd party code - just like the memory corruption in IE that you talk about.

That is not code execution. It is an extremely limited javascript flaw which does not reveal any sensitive information. So please shut the fuck up. IE's BMP flaw a while back let a website OWN your computer. That is the nature of most IE flaws, they grant complete access of your computer to a website. That's not something that you can patch your way out of. That's something that has to be designed properly to never happen.

IE never had a BMP flaw - Windows had. My point was to show you that when you take some arbritrary 'story' you have read from a forum, probably posted by Ignoranus, and re-port it here, not knowing what you really are writing, then you post FUD. You posted your BMP information as it was proof that Windows was shitty - my link proved you wrong as a multitude of application suffers from this.

You really are a retard.

I love your argumentation.

I haven't been impressed or enlightened by anything you've posted. My computer certainly isn't more secure because of it. If there is nothing wrong with IE and Windows, why is Vista such a fundamental rewrite?

Well, I don't post FUD and misinformation to impress you, nor to enlighten you. There is no need for me to re-iterate the solutions to these issues, as they have already been posted multiple times over. (But let me do it anyhow: Keep your system up-to-date, run updated anti-virus software, read what messageboxes are saying, press no / cancel if you don't understand and stop browsing suspicious porn sites).

Incidently Vista is not a re-write. I know there is still a lot of code in it that I wrote for XP some years ago.

Again stop getting your information from stupid forums and start reading about the fundamental technologies - I am quite sure that it will enlighten you.

[Gtwo]

SANS Internet Storm Center; Cooperative Network Security Community - Internet Security - isc



uc8010.com and 2117966.net Attacks Linked