Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > malware problems & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old November 13th, 2008, 06:41 AM
yeow yeow is offline
Frequent Poster
 
Join Date: Dec 2006
Posts: 225
Default Previewing searched pages - any danger?

Previewing pages as in image below. For compromised websites, can the threat be carried over too?
Attached Thumbnails
Click image for larger version

Name:	Example001.jpg
Views:	10
Size:	128.0 KB
ID:	203957  

  #2  
Old November 14th, 2008, 01:23 PM
yeow yeow is offline
Frequent Poster
 
Join Date: Dec 2006
Posts: 225
Default Re: Previewing searched pages - any danger?

Any idea abt this? Say if there's an.....iframe, javascript or watchacallit exploit on the actual website - will the threat be carried over to the "preview" too?

I'm thinking, most likely "yes"? Or I'm paranoid, it's perfectly safe?
  #3  
Old November 15th, 2008, 09:37 AM
Mrkvonic Mrkvonic is offline
Linux Systems Expert
 
Join Date: May 2005
Posts: 7,428
Default Re: Previewing searched pages - any danger?

Hello,

Depends how the preview function is implemented.

It could parse the code - or not ... really depends ... it could merely download the page to the cache, without executing scripts, and show a thumbnail screenshot or something ...

What browser, OS?

Mrk
__________________
http://www.dedoimedo.com

All your base are belong to us

Linux Systems Expert / Systems Programmer, Linux System Administrator, LPIC-1, LPIC-2 (WIP), GSEC, CCHD, CCHA
  #4  
Old November 17th, 2008, 01:36 PM
yeow yeow is offline
Frequent Poster
 
Join Date: Dec 2006
Posts: 225
Default Re: Previewing searched pages - any danger?

Thanks for asking. The example above is Firefox using Google Fx script for Greasemonkey. There're other add-ons that show preview windows too, iirc I might have tried CoolPreviews long ago.

Not using any of them now, but curious as to how they work wrt to what u wrote below.
Quote:
Originally Posted by Mrkvonic
It could parse the code - or not ... really depends ... it could merely download the page to the cache, without executing scripts, and show a thumbnail screenshot or something ..
If previews load faster than loading the webpages themselves, will this generally indicate that some kind of cache images are shown?
 

Wilders Security Forums > Other Security Topics > malware problems & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 05:08 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums